Solved

Domain policy doesn't seem to update

Posted on 2004-09-01
8
155 Views
Last Modified: 2013-12-04
In the domain policy, on a Windows 2000 Domain Controller, I set the security policy to warn a user 14 days before their password needs to be changed.  This change was made 2 months ago.

I found out today (the hard way) that a user was forced to change their password without getting any warning at all.  They had to change it upon login.

Since this change to policy was made 2 months ago, and there was a change, the policy certianly would have been updated by now without me having to run secedit /refreshpolicy.

Does anyone have any ideas why this may have happened?  I do not know if it's happened on other machines in the office, but that's the direction I am headed in troubleshooting next.

Thanks!
Scott
0
Comment
Question by:scottman29
  • 3
  • 2
  • 2
  • +1
8 Comments
 
LVL 7

Expert Comment

by:msice
ID: 11958575
Hey Scott,
Is this policy set in the Default Domain Ploicy?
0
 
LVL 5

Author Comment

by:scottman29
ID: 11958996
yes the default domain policy...
0
 
LVL 7

Expert Comment

by:msice
ID: 11959020
Has the user loged on within the last 14 days?
0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 
LVL 5

Author Comment

by:scottman29
ID: 11959039
yes, daily...
0
 
LVL 7

Accepted Solution

by:
msice earned 75 total points
ID: 11959074
I have noticed some systems have a long time between refreshpolicy or just seem to get stuck and dont refresh at all and need secedit /enforce or secedit /refreshpolicy . I see this problem once in a while and I have ased questions here about it and they have not been answerd http://www.experts-exchange.com/Operating_Systems/Win2000/Q_20967916.html I dont find any MS docs about it either. I would run secedit /refreshpolicy on that computer and the problem with that computer will probly go away for a while.
0
 
LVL 57

Assisted Solution

by:Pete Long
Pete Long earned 50 total points
ID: 11960816
on windows XP you will need to run gpupdate /force as opposed to secedit
0
 
LVL 7

Expert Comment

by:LimeSMJ
ID: 11983317
I have found that sometimes several reboots (not just logging the user out) are required for policies to update on a machine.
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 11998349
ThanQ
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
OfficeMate Freezes on login or does not load after login credentials are input.
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now