Group Policy reverting to MS defaults on reboot of DC

  • Thread starter Thread starter Mike Brown
  • Start date Start date
M

Mike Brown

I have a pure W2K server/client domain with 3 GPOs
including the default domain policy. I have changed the
password policy on the default domain policy but if I
reboot the domain controller the password policy reverts
back to the Microsoft defaults. All other policies are
enabled properly after the reboot.
 
Mike,

Where are you setting the password policy? If you are setting the policy in
an OU and seeing that the password policy is not changing, this is expected
since we can only make changes to the Domain level for password policies.
To configure password policies it the domain level, follow this KB article:

221930 Domain Security Policy in Windows 2000
http://support.microsoft.com/?id=221930

Hope that helps!

Steve Dodson [MSFT]
Directory Services

--------------------
Content-Class: urn:content-classes:message
From: "Mike Brown" <[email protected]>
Sender: "Mike Brown" <[email protected]>
Subject: Group Policy reverting to MS defaults on reboot of DC
Date: Tue, 4 Nov 2003 08:46:08 -0800
Lines: 6
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Thread-Index: AcOi8yVuwLUIvz98RLC5HUfUYwlkfA==
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
Newsgroups: microsoft.public.win2000.group_policy
Path: cpmsftngxa06.phx.gbl
Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.group_policy:16118
NNTP-Posting-Host: TK2MSFTNGXA09 10.40.1.161
X-Tomcat-NG: microsoft.public.win2000.group_policy

I have a pure W2K server/client domain with 3 GPOs
including the default domain policy. I have changed the
password policy on the default domain policy but if I
reboot the domain controller the password policy reverts
back to the Microsoft defaults. All other policies are
enabled properly after the reboot.
Click to expand...


--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
 
Hi Steve,

I am applying the policies at the domain level not at OU
level. I have 3 policy objects listed in the following
order:
Default Domain Policy
Users
Manager
The Manager policy is no override and I do not have block
policy inheritance enabled.

The Default Domain Policy is the only policy that has
password policies defined.
-----Original Message-----
Mike,

Where are you setting the password policy? If you are setting the policy in
an OU and seeing that the password policy is not changing, this is expected
since we can only make changes to the Domain level for password policies.
To configure password policies it the domain level, follow this KB article:

221930 Domain Security Policy in Windows 2000
http://support.microsoft.com/?id=221930

Hope that helps!

Steve Dodson [MSFT]
Directory Services

--------------------
Content-Class: urn:content-classes:message
From: "Mike Brown" <[email protected]>
Sender: "Mike Brown" <[email protected]>
Subject: Group Policy reverting to MS defaults on reboot of DC
Date: Tue, 4 Nov 2003 08:46:08 -0800
Lines: 6
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Thread-Index: AcOi8yVuwLUIvz98RLC5HUfUYwlkfA==
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
Newsgroups: microsoft.public.win2000.group_policy
Path: cpmsftngxa06.phx.gbl
Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.group_policy:16118
NNTP-Posting-Host: TK2MSFTNGXA09 10.40.1.161
X-Tomcat-NG: microsoft.public.win2000.group_policy

I have a pure W2K server/client domain with 3 GPOs
including the default domain policy. I have changed the
password policy on the default domain policy but if I
reboot the domain controller the password policy reverts
back to the Microsoft defaults. All other policies are
enabled properly after the reboot.
Click to expand...


--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.

.
Click to expand...
 
Back
Top