Force New Password......

  • Thread starter Thread starter Steve
  • Start date Start date
S

Steve

Is it true that if you want to force users to change their
password, they have to be under the Domain and not belong
to a OU ?
I created a new OU and added some new users but they never
get the Password Policy. I've ran the force policy on
their machine and the server.
I'm begining to think that people that I want to have this
policy need to be a part of the Default Domain
Policy....Can someone lend some assistance ?

Thanks,
STeve
 
Unless you are Blocking Inheritance on the Default Domain Policy it
will apply to all users in the domain except for Administrators (by
default).

Make sure that the Default Domain Policy has the Read and Apply Group
Policy security right to the Authenticated Users group. Also make
sure that there are no groups that are specifically denied from
reading this policy.

When you say you want to force users to change their password, can
you explain what settings in the policy you are setting?


Tom Ausburne (MSFT)
Windows 2000 Directory Services
This posting is provided "AS IS" with no warranties, and confers no
rights.
 
I want to force my users to have at least 5 characters in
their password, I want passwords to expire after 90 days
and I want 8 passwords in the History.

Thanks,
Steve
 
All these settings can be done through Group Policy. You must put
these settings in the Default Domain Policy. To verify that the
policy is working make another change that is more visable, such as
adding Logoff to the Start Menu.

You can also run gpresult.exe to verify that the policy is actually
applying.

321709 HOW TO: Use the Group Policy Results Tool in Windows 2000
http://support.microsoft.com/?id=321709


Tom Ausburne (MSFT)
Windows 2000 Directory Services
This posting is provided "AS IS" with no warranties, and confers no
rights.
 
Back
Top