Jorge
Wed Jun 18 13:01:48 PDT 2008
this is what I'm talking about:
http://www.minasi.com/forum/topic.asp?TOPIC_ID=20647&SearchTerms=password,policy,attribute
--
Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)
# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #
BLOG (WEB-BASED)-->
http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)-->
http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question -->
http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Herb Martin" <news@learnquick.com> wrote in message
news:uOPyL7L0IHA.1240@TK2MSFTNGP02.phx.gbl...
>
> "Jorge de Almeida Pinto [MVP - DS]"
> <SubstituteThisWithMyFullNameSeparatedByDots@gmail.com> wrote in message
> news:%23N%23iZrL0IHA.1768@TK2MSFTNGP03.phx.gbl...
>> why? as I say, you can put it in another GPO, but the PDC in the end puts
>> it in the default domain GPO. So what's the best practice?
>
> You're saying that changes to one GPO on the domain, will be
> AUTOMATICALLY move to the Default Domain Policy?
>
> [I don't know about this]
>
>
>> Cheers,
>> (HOPEFULLY THIS INFORMATION HELPS YOU!)
>>
>> # Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #
>>
>> BLOG (WEB-BASED)-->
http://blogs.dirteam.com/blogs/jorge/default.aspx
>> BLOG (RSS-FEEDS)-->
http://blogs.dirteam.com/blogs/jorge/rss.aspx
>> ------------------------------------------------------------------------------------------
>> * How to ask a question -->
http://support.microsoft.com/?id=555375
>> ------------------------------------------------------------------------------------------
>> * This posting is provided "AS IS" with no warranties and confers no
>> rights!
>> * Always test ANY suggestion in a test environment before implementing!
>> ------------------------------------------------------------------------------------------
>> #################################################
>> #################################################
>> ------------------------------------------------------------------------------------------
>> "Herb Martin" <news@learnquick.com> wrote in message
>> news:%23NAz$4F0IHA.5928@TK2MSFTNGP06.phx.gbl...
>>>
>>> "Jorge de Almeida Pinto [MVP - DS]"
>>> <SubstituteThisWithMyFullNameSeparatedByDots@gmail.com> wrote in message
>>> news:u86KMT%23zIHA.3972@TK2MSFTNGP03.phx.gbl...
>>>> there is no point in creating a new GPO at domain level with
>>>> password/account lockout policies. The settings of the new policy will
>>>> be written to the domain head and the PDC writes it back again to the
>>>> default domain GPO
>>>
>>> It is a best practice to leave the Default Domain Policy as is,
>>> but in any case it is NOT "required" to make the change there.
>>>
>>> The option exists to make it to ANY domain linked GPO.
>>>
>>>
>>>
>>
>
>