Home All Groups Group Topic Archive Search About
Author
21 Mar 2005 7:57 PM
Sumner Paine
I have a domain-level group policy object that specifies password policy
and account lockout policy. Each and every setting in those policies is
configured.

However, only the password policy is actually being applied  to the
workstations. When I use the Resultant Set of Policies mmc snap-in, it
shows "not configured" for the account lockout policy items.

Any idea what could be causing this?

Author
22 Mar 2005 1:44 PM
Arek Iskra [MVP]
You should use Default Domain Policy to configure account lockout and
password policies. Note that there can be only one such policy per domain.

--
Arek Iskra
MVP for Windows Server - Software Distribution


Show quoteHide quote
"Sumner Paine" <sumn***@comcast.net> wrote in message
news:3a8n8vF64guocU2@individual.net...
>I have a domain-level group policy object that specifies password policy
>and account lockout policy. Each and every setting in those policies is
>configured.
>
> However, only the password policy is actually being applied  to the
> workstations. When I use the Resultant Set of Policies mmc snap-in, it
> shows "not configured" for the account lockout policy items.
>
> Any idea what could be causing this?
Are all your drivers up to date? click for free checkup

Author
22 Mar 2005 6:26 PM
Sumner Paine
Arek Iskra [MVP] wrote:
> You should use Default Domain Policy to configure account lockout and
> password policies. Note that there can be only one such policy per domain.
>

This policy object was the Default Domain Policy, but renamed to
something else. There is only one policy object on the domain that
specifies these settings.

Should I delete the GPO and recreate it? Are there any other ways to
troubleshoot this?
Author
23 Mar 2005 12:17 PM
Arek Iskra [MVP]
Of course, deleting and recreating is always an option :)

Have you tried GPMC?
http://www.microsoft.com/windowsserver2003/gpmc/default.mspx

--
Arek Iskra
MVP for Windows Server - Software Distribution


Show quoteHide quote
"Sumner Paine" <sumn***@comcast.net> wrote in message
news:4240634F.9010705@comcast.net...
> Arek Iskra [MVP] wrote:
>> You should use Default Domain Policy to configure account lockout and
>> password policies. Note that there can be only one such policy per
>> domain.
>>
>
> This policy object was the Default Domain Policy, but renamed to something
> else. There is only one policy object on the domain that specifies these
> settings.
>
> Should I delete the GPO and recreate it? Are there any other ways to
> troubleshoot this?

Bookmark and Share