GPO No override not working

[skiff811]

I am trying to edit the Default Domain Policy GPO to include some password policy changes.

Well I change the maximum password age to 180. Check the No override option and save it.

If I check it 5 minutes later it is still set to 180 days. But after 90 minutes it goes back to 42 days.

What could be causing the No Override to not work?

 

[swabs]

The password policy for a domain can't be overrode (overridden?). The only way to have 2 password policies is to create a child domain beneath the root domain. Then the child domain can have a different password policy.

 

[skiff811]

You can’t change the password policy of the Default Domain GPO?

I’m not looking to have two password policies. I’m just looking to tighten the existing password policy part of the existing Default Domain Policy GPO.

 

[mlichstein]

Are there any other policies at the domain level, or just the default domain policy?

 

[skiff811]

Many others.... But none have anything in the password policy defined.

 

[vbrocks]

Have you tried the gpo mmc using "run as" and run it as the enterprise administrator with enterprise admin's password?