Click here to get back home

Can I have multiple password policies?
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Can I have multiple password policies? Cateyed 03-19-2007
Posted by Cateyed on March 19, 2007, 1:17 am
Please log in for more thread options
 Hi there,

I'm trying to find out whether or not I can have 2 password policies
on Windows Server 2003 Standard.

I have the default domain policy, which is fantastic, but I need to
change this policy for a couple of users ONLY.

I have moved these users into their own OU and created a new GPO, but
it doesn't appear to change anything for them. I've removed the
inheritance for the Default Domain Policy from this OU, and Enforced
this new policy for this OU, but still, nothing.

I'm reasonably sure that I have the policy permissions correct, so I
was wondering if perhaps I couldn't have 2 different password policies
on the domain?? I've tried to read up on this but my M$ books don't
touch on this at all.

Any thoughts?

Thanks,

Max


Posted by Special Access on March 19, 2007, 5:37 am
Please log in for more thread options
>Hi there,
>
>I'm trying to find out whether or not I can have 2 password policies
>on Windows Server 2003 Standard.
>
>I have the default domain policy, which is fantastic, but I need to
>change this policy for a couple of users ONLY.
>
>I have moved these users into their own OU and created a new GPO, but
>it doesn't appear to change anything for them. I've removed the
>inheritance for the Default Domain Policy from this OU, and Enforced
>this new policy for this OU, but still, nothing.
>
>I'm reasonably sure that I have the policy permissions correct, so I
>was wondering if perhaps I couldn't have 2 different password policies
>on the domain?? I've tried to read up on this but my M$ books don't
>touch on this at all.
>
>Any thoughts?
>
>Thanks,
>
>Max

Max,
If I remember correctly, the only way to have different password
policies is to have different domains. The default domain policy is
not inherited to the sub-domain.

How different is the password policy?

Mike

Posted by Danny Sanders on March 19, 2007, 11:00 am
Please log in for more thread options
With Win 2k and Win 2k3 only one account policy to a domain. Account
policies applied at the OU level only take affect when logging on locally to
a computer in that OU.


hth
DDS

> Hi there,
>
> I'm trying to find out whether or not I can have 2 password policies
> on Windows Server 2003 Standard.
>
> I have the default domain policy, which is fantastic, but I need to
> change this policy for a couple of users ONLY.
>
> I have moved these users into their own OU and created a new GPO, but
> it doesn't appear to change anything for them. I've removed the
> inheritance for the Default Domain Policy from this OU, and Enforced
> this new policy for this OU, but still, nothing.
>
> I'm reasonably sure that I have the policy permissions correct, so I
> was wondering if perhaps I couldn't have 2 different password policies
> on the domain?? I've tried to read up on this but my M$ books don't
> touch on this at all.
>
> Any thoughts?
>
> Thanks,
>
> Max
>



Posted by Cateyed on March 20, 2007, 2:04 am
Please log in for more thread options
Hi all,

Thanks so much for the replies. I spoke to a friend and he suggested
disabling the password policy, changing the passwords that need to be
changed manually, and then re-enabling the password policy.

Thanks again!

Max


Posted by Brian Komar [MVP] on March 20, 2007, 7:46 am
Please log in for more thread options
In article <1174370650.312813.325180
@e65g2000hsc.googlegroups.com>, cateyed@gmail.com
says...
> Hi all,
>
> Thanks so much for the replies. I spoke to a friend and he suggested
> disabling the password policy, changing the passwords that need to be
> changed manually, and then re-enabling the password policy.
>
> Thanks again!
>
> Max
>
>
That will only work until the next password change is
invoked.
Brian

Similar ThreadsPosted
Multiple Password Policies? June 22, 2005, 12:15 pm
What security policies effect tasklist.exe password prompt behavior? February 29, 2008, 9:29 am
Firewall setting for multiple FTP sites using multiple ports September 12, 2006, 12:35 pm
Multiple CAs: Selection mechanism for autoenrollment? June 16, 2005, 1:14 pm
Multiple user certificate thumbprint April 19, 2006, 10:04 pm
Implementing PKI infrastructure in multiple forrests January 14, 2008, 2:47 pm
Security templates, problem with multiple settings July 26, 2005, 1:50 pm
Multiple Event ID 529 Errors in Server 2003 April 10, 2006, 1:34 pm
Adding multiple entries for the same user with xcacls... July 19, 2007, 2:21 pm
Folder Encryption Multiple User Access October 16, 2007, 10:35 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap