Networking Forums

Networking Forums > Computer Networking > Windows Networking > Domain policy for password rules

Reply
Thread Tools Display Modes

Domain policy for password rules

 
 
Matt
Guest
Posts: n/a

 
      04-10-2008, 04:06 PM
I inherited a network with a domain that was already in place. We are
developing a Password page on our Intranet where employees can change
their password and unlock their accounts themselves. This app will
also be managing our password security like password expiration,
complexity, etc. I looked at the default domain policy and found all
of the settings that were managing passwords. I changed the following
password policies on the default domain policy to Not Defined:

Enforce Password History
Maximum Password Age
Minimum Password Age
Minimum Password Length
Password Must Meet Complexity Requirements

Before I made the change, all of these policies were defined and set.
These policies, however, are still applied somewhere, because
passwords are still expiring and still must meet complexity
requirements. I have torn this domain policy apart and cannot find
where these settings are still coming from. I've looked for other
rogue underlying domain policies but there aren't any.

Any ideas?????
 
Reply With Quote
 
 
 
 
Matt
Guest
Posts: n/a

 
      04-15-2008, 05:24 PM
There has to be someone out there that has at least an idea?????
 
Reply With Quote
 
Phillip Windell
Guest
Posts: n/a

 
      04-16-2008, 04:04 PM
Setting them to "not defined" doesn't change them from what they are unless
a Policy higher up in the tree over-rides them ("inheiritance" if I spelled
it right).

Set them to specifically what you want them to be. The interface has
built-in notes on the "Details Tab",..use them,..they usually tell you the
default behavor vefore things are messed with. Set the values to equal what
the expected Default would be that you are wanting.

Give it a while to fully replicate,...then if you set them to "not defined"
it should continue to run with the Defaults.

That's from memory, so if I messed it up, I'll accept corrections from the
"staff" :-)

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

"Matt" <(E-Mail Removed)> wrote in message
news:6eef3592-f699-4f2f-90f7-(E-Mail Removed)...
> There has to be someone out there that has at least an idea?????



 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Re: Windows cannot obtain the domain controller name for your computer network. (The specified domain either does not exist or could not be contacted. ). Group Policy processing aborted. Ace Fekay [MVP-DS, MCT] Windows Networking 1 01-10-2010 11:08 PM
password/policy changes Nicklosf Windows Networking 1 12-10-2008 02:15 PM
is there a way to change the local computer administrator password via group policy? Please help El CiD Windows Networking 5 10-19-2007 02:18 AM
Password rules on Windows 2003 Clayton Sutton Windows Networking 5 01-05-2005 04:49 PM
password policy and programmatic user creation Ed Ahlsen-Girard Windows Networking 2 02-05-2004 04:03 AM



1 2 3 4 5 6 7 8 9 10 11