Ben,
The policy that you are seeing is *probably* from the Default Domain Policy
if this computer is part of a domain. Password policies are set at a
domain level and enforced from the domain. If this machine is part of a
domain, changing the policy locally will have no effect.
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
|
| If effective settings are different than local settings, that means your
| computer is inheriting security policy defined settings from a higher
| priority level such as domain or Organizational Unit policy. It certainly
| sounds like your computer is or was at one time a member of a domain. If
it
| is no longer a member of a domain it may still think it is a member of a
| domain. You can check My Computer/properties/computer name. If it still
| shows a domain and is not supposed to be, you can change it to a workgroup
| ONLY if you know the administrators local logon name and password
otherwise
| you may be permanently locked out of the computer. Changing to a workgroup
| and rebooting may refresh Local Security Policy to where you can change it
| to your needs. --- Steve
|
|
| | > Hi,
| >
| > I changed locally on a win2000 prof computer the security settings of
the
| > passwords: i set the maximum age at 0. Now i can read 0 under 'local
| > settings', but under 'effective settings, it's still 42 days.
| >
| > What does mean 'effective settings' and how to put it to 0?
| >
| > Thanks
| > ben
| >
| >
|
|
|