Hey Bill-thank you. So how do I edit the default domain GPO and not an OU within the domain? This is what I see:<div><br></div><div><img src="cid:ii_123109cb2a1366bd" alt="1.JPG" title="1.JPG"><br><br><div class="gmail_quote">
On Wed, Aug 12, 2009 at 9:53 AM, <span dir="ltr"><<a href="mailto:blloyd@buskercom.com">blloyd@buskercom.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p><span style="font-size:11.0pt;color:#1F497D">No problem. Either edit the Default Domain GPO and change
the settings under Windows Settings>Security Settings>Account
Policies/Password Policy, or add a GPO that does the same thing. You have
to set this at the Domain level not in an OU within the domain. That is a
limitation of Win2k3.</span></p>
<p><span style="font-size:11.0pt;color:#1F497D"> </span></p>
<br><br><div align="left"><p><font face="Times New Roman"><span style="font-weight:bold;font-size:14pt;color:navy">Bill Lloyd</span></font><font color="navy"> </font><font face="Times New Roman"><span style="font-size:11pt;color:navy"><br>
IT Manager</span></font><br><br></p><img src="cid:3bc133ff-2e3d-4d4f-b452-878c6907e5e2"><br><p><font face="Times New Roman"><span style="font-size:11pt;color:black">2567 Athens Hwy.<br>Gainesville, GA 30507<br>Phone: 770-417-1604 Ext.: 250<br>
Fax: 770-417-1747<br>
Cell: 404-379-6963</span></font></p><p><font face="Times New Roman"><span style="font-size:11pt;color:navy"><em><a href="mailto:blloyd@buskercom.com" target="_blank">blloyd@buskercom.com</a></em></span></font></p><p>
<span style="font-size:7pt;color:navy;font-family:Arial">This email and any accompanying attachments may contain confidential and proprietary information. If you are not the intended recipient, you are requested to delete this entire communication immediately. Emails cannot be guaranteed to be secure or free of errors or viruses. The sender does not accept any liability or responsibility for any problems that may result from emails you receive.</span></p>
</div><div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p><b><span style="font-size:10.0pt">From:</span></b><span style="font-size:10.0pt">
<a href="mailto:discuss-bounces@itdiscuss.org" target="_blank">discuss-bounces@itdiscuss.org</a> [mailto:<a href="mailto:discuss-bounces@itdiscuss.org" target="_blank">discuss-bounces@itdiscuss.org</a>] <b>On
Behalf Of </b>Darin Rohatinsky<br>
<b>Sent:</b> Wednesday, August 12, 2009 12:52 PM<br>
<b>To:</b> IT Discussion Forum<br>
<b>Subject:</b> Re: [itdiscuss] Active Directory Password Policy</span></p>
</div><div><div></div><div class="h5">
<p> </p>
<p style="margin-bottom:12.0pt">Thank you. Still trying
to figure out how to set the password policy in Windows Server 2003 if anyone
knows...</p>
<div>
<p>On Fri, Aug 7, 2009 at 3:47 PM, Michael Sainz <<a href="mailto:michaelsainz@sunsetpres.org" target="_blank">michaelsainz@sunsetpres.org</a>>
wrote:</p>
<div>
<div>
<p><span style="font-size:11.0pt;color:#1F497D">I know this might not apply to
you specifically, but with anyone using Windows Server 2008 you can take
advantage of Password Settings Objects (PSO). You apply them to AD groups and
users instead of OU’s with GPO’s.</span></p>
<p><span style="font-size:11.0pt;color:#1F497D"> </span></p>
<p><b><span style="font-size:16.0pt;color:#31849B">michael</span></b><b><span style="font-size:16.0pt;color:black">|</span></b><b><span style="font-size:16.0pt;color:#76923C">sainz</span></b></p>
<p><span style="font-size:8.0pt;color:#1F497D">information technology coordinator
| <a href="http://www.sunsetpres.org/" target="_blank"><span style="color:#1F497D">sunset
presbyterian church</span></a></span></p>
<p><span style="font-size:8.0pt;color:#1F497D"><a href="mailto:michaelsainz@sunsetpres.org" target="_blank">michaelsainz@sunsetpres.org</a>
| <a href="http://twitter.com/michaelsainz" target="_blank"><span style="color:#1F497D">twitter.com/michaelsainz</span></a> | <a href="http://www.iamdigerati.com/" target="_blank"><span style="color:#1F497D">Blog</span></a></span></p>
<p><span style="font-size:11.0pt;color:#1F497D"> </span></p>
<p><span style="font-size:8.0pt;color:#1F497D">"We listen to worship
music, while the rest of the world listens to hip hop and pop. We talk about
history, while the rest of the world talks about reality. We use bulletins,
while the rest of the world is on Facebook."</span><span style="font-size:9.0pt;color:#1F497D"> -<b>Tony Morgan</b></span></p>
<p><span style="font-size:11.0pt;color:#1F497D"> </span></p>
<p><b><span style="font-size:10.0pt">From:</span></b><span style="font-size:10.0pt"> <a href="mailto:discuss-bounces@itdiscuss.org" target="_blank">discuss-bounces@itdiscuss.org</a>
[mailto:<a href="mailto:discuss-bounces@itdiscuss.org" target="_blank">discuss-bounces@itdiscuss.org</a>]
<b>On Behalf Of </b>Darin Rohatinsky<br>
<b>Sent:</b> Thursday, August 06, 2009 1:11 PM<br>
<b>To:</b> IT Discussion Forum<br>
<b>Subject:</b> [itdiscuss] Active Directory Password Policy</span></p>
<div>
<div>
<p> </p>
<p>I'm sure this is easy for some of you, but I have never had to change the password
policy and I need to. We are running with one Primary Domain Controller,
running Windows 2000 Server.<br clear="all">
<br>
-- <br>
IT Department<br>
Living Hope Church<br>
(360) 944-3905</p>
</div>
</div>
</div>
</div>
<p style="margin-bottom:12.0pt"><br>
_______________________________________________<br>
it discuss mailing list: <a href="mailto:discuss@itdiscuss.org" target="_blank">discuss@itdiscuss.org</a><br>
Mailing List: <a href="http://itdiscuss.org/discuss" target="_blank">http://itdiscuss.org/discuss</a><br>
Web Discussion Board: <a href="http://itdiscuss.org/discuss-forum" target="_blank">http://itdiscuss.org/discuss-forum</a><br>
Wiki: <a href="http://itdiscuss.org/wiki" target="_blank">http://itdiscuss.org/wiki</a><br>
Internet Relay Chat: irc://<a href="http://irc.freenode.net/citrt" target="_blank">irc.freenode.net/citrt</a></p>
</div>
<p><br>
<br clear="all">
<br>
-- <br>
IT Department<br>
Living Hope Church<br>
(360) 944-3905</p>
</div></div></div>
</div>
<br>_______________________________________________<br>
it discuss mailing list: <a href="mailto:discuss@itdiscuss.org">discuss@itdiscuss.org</a><br>
Mailing List: <a href="http://itdiscuss.org/discuss" target="_blank">http://itdiscuss.org/discuss</a><br>
Web Discussion Board: <a href="http://itdiscuss.org/discuss-forum" target="_blank">http://itdiscuss.org/discuss-forum</a><br>
Wiki: <a href="http://itdiscuss.org/wiki" target="_blank">http://itdiscuss.org/wiki</a><br>
Internet Relay Chat: irc://<a href="http://irc.freenode.net/citrt" target="_blank">irc.freenode.net/citrt</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br>IT Department<br>Living Hope Church<br>(360) 944-3905<br>
</div>