password policy not being enforced

  • Thread starter Thread starter adam mccombs
  • Start date Start date
A

adam mccombs

I am running windows 2000 server edition and I have set up
a password policy that requires 6 character passwords and
complexity requirements. I have set it up under domain
security policy and domain controller security policy.
Is there something else I need to set up to enforce the
policy?
 
I am running windows 2000 server edition and I have set up
a password policy that requires 6 character passwords and
complexity requirements. I have set it up under domain
security policy and domain controller security policy.
Is there something else I need to set up to enforce the
policy?
Click to expand...


It should automatically apply to domain member computers (and their users).


Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com
 
You'll need to give a little time for this to apply. You should only apply
this at the domain level (it doesn't work from anywhere else anyway). Once
you apply the policy, you need to wait for intrasite replication and then
policy application - maximum five minutes each on DCs.

Remember this policy is applied to the DC not the clients - as the clients
authenticate with the DCs not themselves...

--


Paul Williams
_______________________________
http://www.msresource.net


Join us in our free, public forum:
http://forums.msresource.net
_______________________________
I am running windows 2000 server edition and I have set up
a password policy that requires 6 character passwords and
complexity requirements. I have set it up under domain
security policy and domain controller security policy.
Is there something else I need to set up to enforce the
policy?
Click to expand...


It should automatically apply to domain member computers (and their users).


Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com
 
You only need it in Default Domain Policy not the domain conrtroller
policy.

If it is not applying it could be for several reasons:

1. Only Windows 2000 and above read Group Policies
2. Clients are not getting the policy
In this case, check things like DNS configuration
Are the clients logged into the domain? Type "Set L" (no quotes)
at command prompt - it should show a DC as the logon server. If it
shows the client, then it is not logging into the domain.
 
Back
Top