Policy not getting pushed.. 3

[ilusv]

I wanted to start a Password Complexity & length GPO.. so I went under
Computer config
-Windows Settings
-Security settings
-Account Policy
& set the length to 6 Characters & enabled Complexity..

I thought it would work but its not; The users can still log-on with 3 letter passwords..

I looked under
-User Config.. thinking maybe i need to set it up there. but I couldn't find anything.
whats going on?

 

[ilusv]

I set this policy at the OU level.

 

[mlichstein]

Password policies can only be set in one place: the domain level.

Password policies set at any other level in the directory will have no effect.

 

[GlenJohnson]

Here's some simple and really good reading that might help.

http://www.remainsecure.com/whitepapers/os/nt/passcontrol.htm

Glen A. Johnson
If you're from Northern Illinois/Southern Wisconsin check out Tek-Tips in Chicago, Illinois Forum.

Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884

 

[ilusv]

Thanks mlichstein I was unaware of that.. I will read that over Glen.. thanks to you too..