I look after a single Windows 2003 domain for our small office. Some time ago I edited the default domain policy using the Group Policy Management snap-in via my XP workstation to enforce a simple password policy. Domain passwords were set to expire after 90 days and to enforce new complexity rules but it's been over 90 days now and it hasn't kicked in. It's the first time I've had to tinker with group policies so I've probably done something dumb.
If I select Default Domain Policy under the domain's Group Policy Objects there are 4 tabs in the right hand screen. Under Scope our single domain is listed under Links and with both Enforced and Link Enabled listed as Yes. Under Security Filtering it states that the settings in this GPO apply to Authenticated Users and Domain USers. In the Details tab it states that the GPO status is Enabled. The Details tab doesn't appear to show anything relevant and in the Delegation tab it states the following permissions, none of which are inherited.
Authenticated Users - Read (from Security Filtering)
Domain Admins - Edit, delete, modify security
Domain Users - Read (from Security Filtering)
Enterprise Admins - Edit, delete, modify security
Enterprise Domain Controllers - Read
System - Edit, delete, modify security
If I right-click on the GPO or the link located under the domain name in the tree and go to View I get the Group Policy 'browser'. The bit I've edited is under Default Domain Policy--Computer Configuration--Windows Settings--Security Settings--Account Policies--Password Policy. I've set the following
Enforce password history - 3
Max password age - 90
Min password age - 30
Min password length - 7
Password must meet complexity requirements - Enabled
Store password using reversible encryption - Disabled
I don't know if I've provided enough information but I'd be grateful if someone with more experience in these things could point out where I've dropped a nut. If all appears well then I'd like to know why it hasn't woken up.