Director of Information Technology

yo_bee

IT Professional

Albert Widjaja

<div>
It is linked to the root and is being inherited by the DC OU. &nbsp; &nbsp;<br><br><br>
</div>


It is linked to the root and is being inherited by the DC OU.    




<div>
How exactly do you define/determine &quot;<i>does not seem to be applying</i>&quot;?<br />
Run <br />

<pre><code id="code-20-43311030-1">gpupdate /target:computer /force</code></pre>
on a DC, then open <b>rsop.msc</b> on that same DC, and verify that the intended policy actually applies.<br />
Lather, rinse, repeat for all DCs.
</div>


How exactly do you define/determine "does not seem to be applying"?
Run


gpupdate /target:computer /force

on a DC, then open rsop.msc on that same DC, and verify that the intended policy actually applies.
Lather, rinse, repeat for all DCs.

<div>
Turned out even though I did not see it applied on the DC (RSOP) It did apply properly to the users computers. &nbsp;Thanks for your input though &nbsp;<br><br>It has been a long time since I contributed or post on this forum. &nbsp;<br><br>Thanks Mike&nbsp;
</div>


Turned out even though I did not see it applied on the DC (RSOP) It did apply properly to the users computers.  Thanks for your input though  

It has been a long time since I contributed or post on this forum.  

Thanks Mike 

<div>
<div class="content wysiwyg-content fr-view">
Good day all. &nbsp;I am in the process of updating my Domain Password Policy and it does not seem to be applying. <br><br>Prior to attempting this update, my GP was setup with Block Inheritance to the Domain Controller OU. &nbsp;I found an article that recommends removing the Block Inheritance, but I did not see any of the settings apply to the DC's nor did it apply to the domain computers.<br><br>My current Domain is at 2008 Forest and Domain level with a mix of 2008/2012 and 2016 DC's<br><br><br><br>
</div>
</div>



Good day all.  I am in the process of updating my Domain Password Policy and it does not seem to be applying.
Prior to attempting this update, my GP was setup with Block Inheritance to the Domain Controller OU.  I found an article that recommends removing the Block Inheritance, but I did not see any of the settings apply to the DC's nor did it apply to the domain computers.
My current Domain is at 2008 Forest and Domain level with a mix of 2008/2012 and 2016 DC's

Domain Password Policy not enforcing.

Group Policy is a feature of the Microsoft Windows NT family of operating systems (including Windows 7, Windows 8.1, Windows 10, and Windows Server 2003+) that controls the working environment of user accounts and computer accounts. Group Policy provides centralized management and configuration of operating systems, applications, and users' settings in an Active Directory environment. A set of Group Policy configurations is called a Group Policy Object (GPO). A version of Group Policy called Local Group Policy (LGPO or LocalGPO) allows Group Policy Object management without Active Directory on standalone computers.

Group Policy

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.