GPO Deletion

  • Thread starter Thread starter jovan
  • Start date Start date
J

jovan

HI there

Under Users n groups on the Root domain, the group policy
that is accessible, in there un der the Password policy i
configured it to be 8 min password and for it to remember
5 passwords, and also allow password complexity. When i
was adding a user in the domain, it gave me an error
message saying that the password does not meet the
complexity. I didnt want the policy to be applied to the
Domain Controller so i reset the Password complexity
policy to undefined. For some reason the policy is not
resetting to the latter. i have restarted the server
couple times and still no joy. can somebody help me
please?????!!!!!.

Also silly me i have accidently deleted the subfolder
under the c:\winnt\sysvol\policies\ where the GPO stores
all the settings. is there a way to recover those folders?

regards

Paresh
 
Hello Paresh.

The account policies in Active Directory apply to all systems in the domain,
including all domain controllers. They are defined in the Default Domain
Policy by default.

The settings you edited *must* be defined at the domain policy level and
*not* set to "Not Defined". Please re-enable the default settings for the
account policies. Having them configured to 'Not Defined' will yield
unexpected results.

255550 Configuring Account Policies in Active Directory
http://support.microsoft.com/?id=255550

221930 Domain Security Policy in Windows 2000
http://support.microsoft.com/?id=221930

If you wish to remove the password complexity requirement, configure the
setting "Passwords must meet complexity requirements" to 'Disabled'.

David Fisher
Enterprise Platform Support
 
Back
Top