Group Policy not working

[BobSchleicher]

I have a group policy that I want to apply to just a certain container. I define the policy and link it to the container but the policy defined higher in the tree always wins. I have even selected "enforced" on the lower policy and the higher policy is not selected "enforced".

Here is a tree example:

DOMAIN.COM - "company policy"
container1
container2
subcontainer1 - "container policy"

Currenty the "company policy" is applied to everything, which is what I want, but I want subcontainer1 to use the "company policy" first then apply the "container policy" next to apply any additional changes.

Thanks for any help.

BobSchleicher

 

[markdmac]

And where in the structure are the user and computer objects? And what kind of policies are being set, are they user or computer policies?

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[BobSchleicher]

Company Policy is a copy of the default domain policy modified with both user and computer changes.

Container policy is a new policy with only password complexity requirement changes. Subcontainer1 is populated with Admins.

Our company policy states: password is 8 characters minimum with complexity and I would like to apply an additional policy to subcontainer1 which changes the password requirments to 12 characters minimum with other password changes (change every x days, remember last x passwords, etc).

Thanks.

BobSchleicher

 

[markdmac]

You can only define password policies at the domain level.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[BobSchleicher]

Thanks for the help.

BobSchleicher

 

[rtafresh]

not sure if i understand this but here is what my 2 cents are. OU containers are like folders. They inherit policies from parents and can have a block mechanisim to stop inheritance.
Policies act like permissions on folders subfolders have union of GPO's theirs and those of their parents.
If there is any conflict on any Value. the one of the parents wins.
user gpresult to see if your policy is being filtered out!

 

[markdmac]

rtafresh, password policies are different from other policies. You cannot have more than one password policy for the domain.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript