Solved

Windows Server 2008

Posted on 2012-04-10
5
294 Views
Last Modified: 2012-04-29
My Domain Controller is a Windows Standard without Hyper-V SP2.  I am trying to set up a password polciy through Group Policy.  For some reason or another it is not applying the Group Policy.  I have rebooted the server and force a gpupdate. My environment is a Terminal Server.  I was setting the password polciy in the Default Doman Policy.  The pollicy is set at the domain level and at the OU.  I am not sure if some of the issue is the version of the OS installed.
0
Comment
Question by:cmhorvath
5 Comments
 
LVL 9

Accepted Solution

by:
MBobrek earned 500 total points
Comment Utility
You mention that you are not sure if an issue is the OS..... what mix of OS do you have?  Does it apply to one OS and not the other?
Go to the CMD prompt and type GPRESULT /R  (on windows 7, you may not see the Computer applieds - only user).  Better yet, you can go to the root of C: and run GPRESULT /H report.htm (this would dump the results into a file on the root of C: called report.htm.  Or run it from any directory but note what dir you are in.

You need to make sure that the policy is definately being applied to the OU the computer is in.  BUT - if this is a USER policy (password), and you are applying it to an OU where computers reside, you will need to enable "loopback" processing.  

Also confirm you don't have a WMI filter in place that may be setup to filter by say, 32bit/64bit applies.
0
 
LVL 8

Expert Comment

by:X-treem
Comment Utility
set it in the default domain controller policy
defaullt domain applies for member servers/workstations, not for the DC (where AD is located)
0
 
LVL 37

Expert Comment

by:Neil Russell
Comment Utility
Password policy should be set in the Default Domain Policy and nowhere else. Unless using fine grained policies this is the ONLY policy that will be used, you can NOT have multiple Group policies for password security settings.
0
 
LVL 1

Author Comment

by:cmhorvath
Comment Utility
I will try those suggestions and get back to you.  Also, I am unable to set go in ad users and computers.  Any reason why I do not get that tab.
0
 
LVL 1

Author Closing Comment

by:cmhorvath
Comment Utility
This helped me to figure out what GPO's had not been applying.  The issue was with there was password policy set at the local policy level and through GPO.  Once I changed this the policy set.
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now