Exception to domain password policy

  • Thread starter Thread starter Michael
  • Start date Start date
M

Michael

We are in the process of enacting a domain password policy
and I need to make sure that the account options setting
in AD Users & Computers will override them. We have a few
applications that will not work if the password is changed.
 
A domain level GPO will override any settings in AD Users & Computers.
For the accounts you don't want to change, remove the 'apply group policy'
permission from them.
 
I am looking for the same solution and have previously applied your suggestion without success

I have set Deny to the 'Apply Group Policy' for that user, and have removed the 'Read' permission

When I run gpresults.exe logged in as that user, the password policy still is in effect

Any ideas?
 
Hello Larry.

Password policies are domain-wide and cannot be disabled on a "per user"
basis. All users in a domain must have the same password policy.

Best Regards,
David Fisher
Enterprise Platform Support
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

AD and Password policy question 12
Password Policy for Service Accounts 2
default domain policy, password policy 2
Domain Password Policy 1
How to check bad password login in Windows 2003 domain controller? 1
Domain Default Group Policy Password lockout setting 2
SOX compliant .. different password policy need for privil 7
Password Change Policy 2

Back
Top