Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Deafult Domain Policy not applied to some users/computers
Deafult Domain Policy not applied to some users/computers [message #333631] Wed, 02 December 2009 12:33 Go to next message
ajgale1975  is currently offline ajgale1975  United States
Messages: 3
Registered: December 2009
Junior Member
Our company has a large Windows 2003 domain spanning the globe.
Recently I was pinged for having around 120 users who were reported to
have a zero password length requirement.

The domain has a default domain policy that is applied company wide.
There is no inheritance being blocked on any of the OUs. I have indeed
checked via gpresult that the default domain policy is being applied to
the machines and users who are affected.

The policy states that all passwords must be minimumly 8 characters
long yet these 120 users or so can reset their passwords to blank. Other
users at the same site and OU are indeed receiving the proper password
requirements.

Has anyother heard of this issue before or have any suggestions?


--
ajgale1975
------------------------------------------------------------ ------------
ajgale1975's Profile: http://forums.techarena.in/members/160349.htm
View this thread: http://forums.techarena.in/active-directory/1277915.htm

http://forums.techarena.in
Re: Deafult Domain Policy not applied to some users/computers [message #333633 is a reply to message #333631] Wed, 02 December 2009 13:27 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello ajgale1975,

Please check also with rsop.msc to see if the details are correct. Are the
problem machines multihomed or created form a not sysprepped image? Which
OS version, SP/patch level, is in use on the workstations?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Our company has a large Windows 2003 domain spanning the globe.
> Recently I was pinged for having around 120 users who were reported to
> have a zero password length requirement.
>
> The domain has a default domain policy that is applied company wide.
> There is no inheritance being blocked on any of the OUs. I have
> indeed checked via gpresult that the default domain policy is being
> applied to the machines and users who are affected.
>
> The policy states that all passwords must be minimumly 8 characters
> long yet these 120 users or so can reset their passwords to blank.
> Other
> users at the same site and OU are indeed receiving the proper password
> requirements.
> Has anyother heard of this issue before or have any suggestions?
>
> http://forums.techarena.in
>
Re: Deafult Domain Policy not applied to some users/computers [message #334174 is a reply to message #333633] Thu, 03 December 2009 06:29 Go to previous messageGo to next message
pbbergs  is currently offline pbbergs  United States
Messages: 1024
Registered: July 2009
Senior Member
If allowable, try moving a user to a different OU (In a different site
temp), have the user log off and log back on. See if that makes any
difference.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:6cb2911da7dc8cc41ad6ca98a42@msnews.microsoft.com...
> Hello ajgale1975,
>
> Please check also with rsop.msc to see if the details are correct. Are the
> problem machines multihomed or created form a not sysprepped image? Which
> OS version, SP/patch level, is in use on the workstations?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Our company has a large Windows 2003 domain spanning the globe.
>> Recently I was pinged for having around 120 users who were reported to
>> have a zero password length requirement.
>>
>> The domain has a default domain policy that is applied company wide.
>> There is no inheritance being blocked on any of the OUs. I have
>> indeed checked via gpresult that the default domain policy is being
>> applied to the machines and users who are affected.
>>
>> The policy states that all passwords must be minimumly 8 characters
>> long yet these 120 users or so can reset their passwords to blank.
>> Other
>> users at the same site and OU are indeed receiving the proper password
>> requirements.
>> Has anyother heard of this issue before or have any suggestions?
>>
>> http://forums.techarena.in
>>
>
>
Re: Deafult Domain Policy not applied to some users/computers [message #335263 is a reply to message #334174] Fri, 04 December 2009 09:56 Go to previous messageGo to next message
ajgale1975  is currently offline ajgale1975  United States
Messages: 3
Registered: December 2009
Junior Member
They are not multihomed nor created from a non sysprepped image. The
machines are running Windows XP SP3. I will check the results of rsop.


--
ajgale1975
------------------------------------------------------------ ------------
ajgale1975's Profile: http://forums.techarena.in/members/160349.htm
View this thread: http://forums.techarena.in/active-directory/1277916.htm

http://forums.techarena.in
Re: Deafult Domain Policy not applied to some users/computers [message #339212 is a reply to message #333631] Wed, 09 December 2009 09:12 Go to previous messageGo to next message
ajgale1975  is currently offline ajgale1975  United States
Messages: 3
Registered: December 2009
Junior Member
I check the results of RSOP.MSC and they are correct according to the
default domain policy. In asnwer to moving to a different OU, I have
users in multiple OUs and at multiple sites having similiar issues.

Anything else I can look for?


--
ajgale1975
------------------------------------------------------------ ------------
ajgale1975's Profile: http://forums.techarena.in/members/160349.htm
View this thread: http://forums.techarena.in/active-directory/1277916.htm

http://forums.techarena.in
Re: Deafult Domain Policy not applied to some users/computers [message #339929 is a reply to message #339212] Thu, 10 December 2009 06:24 Go to previous message
pbbergs  is currently offline pbbergs  United States
Messages: 1024
Registered: July 2009
Senior Member
Verify that the users have read and apply for the default domain policy,
there isn't much else I can think of.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"ajgale1975" <ajgale1975.42xqfb@DoNotSpam.com> wrote in message
news:ajgale1975.42xqfb@DoNotSpam.com...
>
> I check the results of RSOP.MSC and they are correct according to the
> default domain policy. In asnwer to moving to a different OU, I have
> users in multiple OUs and at multiple sites having similiar issues.
>
> Anything else I can look for?
>
>
> --
> ajgale1975
> ------------------------------------------------------------ ------------
> ajgale1975's Profile: http://forums.techarena.in/members/160349.htm
> View this thread: http://forums.techarena.in/active-directory/1277916.htm
>
> http://forums.techarena.in
>
Previous Topic:force user to change password on next logon
Next Topic:Restricted Access to Add/Remove Programs
Goto Forum:
  


Current Time: Wed Jan 17 04:13:33 MST 2018

Total time taken to generate the page: 0.02206 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software