Exception to domain password policy

  • Thread starter Thread starter Michael
  • Start date Start date
M

Michael

We are in the process of enacting a domain password policy
and I need to make sure that the account options setting
in AD Users & Computers will override them. We have a few
applications that will not work if the password is changed.
 
A domain level GPO will override any settings in AD Users & Computers.
For the accounts you don't want to change, remove the 'apply group policy'
permission from them.
 
I am looking for the same solution and have previously applied your suggestion without success

I have set Deny to the 'Apply Group Policy' for that user, and have removed the 'Read' permission

When I run gpresults.exe logged in as that user, the password policy still is in effect

Any ideas?
 
Hello Larry.

Password policies are domain-wide and cannot be disabled on a "per user"
basis. All users in a domain must have the same password policy.

Best Regards,
David Fisher
Enterprise Platform Support
 
Back
Top