JSI Tip 4800. Changes to the password policy are NOT applied?

Jerold Schulman

February 5, 2002

1 Min Read
ITPro Today logo in a gray background | ITPro Today

When you change the password policy in your domain, the changes are NOT applied?

 If you didn't apply the policy changes to the Default Domain Group Policy, this problem willoccur.

If Block Policy inheritance is enabled on the Domain Controllers organizational unit, the password policy will NOT be applied.

To check for Block Policy inheritance:

1. Open the Active Directory Users and Computers snap-in.

2. Right click the Domain Controllers organizational unit and press Properties.

3. Select the Group Policy tab.

4. If the Block Policy inheritance box is checked, clear it.

5. If you cleared the Block Policy inheritance box, run secedit /refreshpolicy machine_policy /enforce oneach domain controller.

NOTE: If you didn't set the password policy in the Default Domain policy, configure the password policy before running step 5.



Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like