Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 213
  • Last Modified:

Password Group Policies

How do you set up two differnent password policies on two different OUs

Here is what I have tried with no success.

OU called admins
OU called nonadmins

Example
admin
Password complexity enabled
minimum charitors 8

nonadmins
Password complexity disable
minimum characters 4

Default domain policy
password complexity disable
minimum characters 1



When I run a GP modeling in GPMC I get the following and this is will blocking inherence on each OU

password complexity disabled                                 default domain policy
minimum characters  1                                              default domain policy


No matter what I do it does not work. does anyone have any suggestions. Maybe I am missing a simple step.
0
newsqlguy
Asked:
newsqlguy
1 Solution
 
cuongndCommented:
As my opinion, you should move all computers that you want to apply these policies to appropriate OUs. The reason is that password policies are configured in Computer Configuration, and will be applied on computers, not on users.

As your posted result, I think that all your computers are located at Computers container, so two GPOs will not be applied to them.
0
 
Dave_DietzCommented:
Password policies are Domain level policies.

You cannot set a different password policy at an OU level.  (Well, you *can* but it has no effect.)

See the following KB article:
http://support.microsoft.com/default.aspx?scid=kb;en-us;269236

Dave Dietz
0

Featured Post

Vote for the Most Valuable Expert

It’s time to recognize experts that go above and beyond with helpful solutions and engagement on site. Choose from the top experts in the Hall of Fame or on the right rail of your favorite topic page. Look for the blue “Nominate” button on their profile to vote.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now