Windows 2003 password group Policy

Posted on 2005-04-06
Last Modified: 2010-04-18
I see everywhere that the password policy can only be change on the default domain group policy, but what about if I want to have half my users with password complexity and the other half without. is that possible? do I have to create 2 GPO at the domain level? or the accoutn policies can only be change with the defualt domain GPO. I hope someone has the answer for this. thank you
Question by:comtekn
    LVL 14

    Accepted Solution

    Account policies are only effective at the domain level, and each domain can only have one set of account policies.  Put your account policy in the Default Domain Policy.

    If you absolutely need to have different account policies for different groups of users, you will need different domains.  Microsoft only recommends this if a subset of users requires stricter account policies for extreme security reasons (think Department of Defense or Jet Propulsion Labarotory) or legal reasons (think Sarbanes-Oxley Act or multi-national networks).
    LVL 1

    Author Comment

    Ok so thats that, here is a quick question. what happens if the default domain policy gets deleted.and i have 2 other policies at the domain level. which one becomes the main one. Just had that in my mind for a long time and may be someone can clear it up. thanx
    LVL 14

    Expert Comment

    Whichever policy is set at the domain level and has the highest precedence will set the account policy for the domain.
    LVL 14

    Expert Comment

    And, the highest group policy object in the list has priority.

    Featured Post

    Why You Should Analyze Threat Actor TTPs

    After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

    Join & Write a Comment

    The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
    Learn about cloud computing and its benefits for small business owners.
    This video is in connection to the article "The case of a missing mobile phone (". It will help one to understand clearly the steps to track a lost android phone.
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now