Windows 2008 R2 password policy

Hi!
I have created a password policy and linked it to the computer OU.

The policy link is enable and enforced is set to no

The Policy dosen't take effect and I don't know why...

I have done that yesterday.  Do I have to do a gpupdate /force?

Thanks!
polycorjspAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mike KlineCommented:
The password policy has to be linked at the domain level to apply, the password policy linked at the computer OU will only apply to local accounts on those machines.


Do you already have a password policy at the domain level?   Are you trying to have a different policy?   You can also check fine grained password policies if your domain functional level is at 2008 or higher.


Thanks

Mike
0
polycorjspAuthor Commented:
Hi!
If a password policy is at the domain level, is it going to affect the domain admin account and other service account?

Thanks!
0
Mike KlineCommented:
Yes it will apply to all accounts. if you want a different policy for those accounts/groups you would FGPP.  That is the exact reason the feature was introduced.

Thanks

Mike
0
SandeshdubeySenior Server EngineerCommented:
You can have ONLY ONE password and account lockout policy in ANY 2003 AD Domain! Windows Server 2008 introduces multiple password and account lockout policies through PSOs when the DFL = at least w2k8

To apply multiple password policies / lockout policies, consider using AD DS Fine-Grained password policy: http://technet.microsoft.com/en-us/library/cc770394(WS.10).aspx
 
To use it, you should have 2008 DFL which means that all DCs in your domains should be 2008 or higher.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.