Password Expiration

[rezinz28]

Group,

I have to setup my domain (W2k) to have the passwords expire after 30 days. I was trying to do this from a GPO but noticed the GPO only allowed this in the Computer Configuration section. I want this to take affect for different OU's. I know I can add the GPO to different OU's but I don't want to have the administrative accounts affected. Plus I want it for the Users not their computers.

Thank You,
Steve

 

[GrnEyedLdy]

Rezinz28,

Since Domains act as security boundries, it is not possible to have different password polices for users or OU's within your domain.

Password policies, Account lockout polices, and Kerberos policies are applied only at the Domain level.

Your DC's will receive their settings from domain-level account policies and ignore the settings in policies linked to OU's.

You link the GPO containing the Password policy settings to the "Computer Configuration" node of your GPO so that it will apply to all computers that log in to your domain.

Hope this helps...

Patty