+ Post New Thread
Results 1 to 5 of 5
Windows Server 2000/2003 Thread, Quick Password Question Again in Technical; On Server 2003 - does the password policy override the 'password never expires' option [ tick box ] on the ...
  1. #1

    mattx's Avatar
    Join Date
    Jan 2007
    Posts
    9,240
    Thank Post
    1,058
    Thanked 1,068 Times in 625 Posts
    Rep Power
    740

    Quick Password Question Again

    On Server 2003 - does the password policy override the 'password never expires' option [ tick box ] on the actual user account ?
    I have a feeling it does but need to double check.....

  2. #2

    mattx's Avatar
    Join Date
    Jan 2007
    Posts
    9,240
    Thank Post
    1,058
    Thanked 1,068 Times in 625 Posts
    Rep Power
    740
    This is what annoys me - you get conflicting reports and I can't find any simple bleeding answer on any MS page...
    This chap says Group Policy Overrides:
    Do the Group Policy Object and 'Password Never Expires' flag interact?
    But on other pages and forums people say it does not.

    It's a simple question but everywhere I look there is no answer - even my inside out 2003 there is no answer, I'll start on my Technet knowledge base next.....

  3. #3
    mrmontymick's Avatar
    Join Date
    Mar 2009
    Location
    Peterborough, UK
    Posts
    64
    Thank Post
    7
    Thanked 16 Times in 10 Posts
    Rep Power
    13
    Quote Originally Posted by mattx View Post
    On Server 2003 - does the password policy override the 'password never expires' option [ tick box ] on the actual user account ?
    I have a feeling it does but need to double check.....
    No, it doesn't. Settings work from furthest to nearest, and the account settings will take precedence as it is nearest the user. Hope that makes sense....

    For example ->

    If you had a user in an OU heirarchy such as below it would be applied in this order:

    Domain Default Policy ---> Staff Settings Policy ----> IT Staff Settings Policy ---> AD Account Settings

    The AD settings for the inividual user will override group policy.

    Regards

    Kevin

  4. Thanks to mrmontymick from:

    mattx (3rd March 2010)

  5. #4

    mattx's Avatar
    Join Date
    Jan 2007
    Posts
    9,240
    Thank Post
    1,058
    Thanked 1,068 Times in 625 Posts
    Rep Power
    740
    Quote Originally Posted by mrmontymick View Post
    No, it doesn't. Settings work from furthest to nearest, and the account settings will take precedence as it is nearest the user. Hope that makes sense....

    For example ->

    If you had a user in an OU heirarchy such as below it would be applied in this order:

    Domain Default Policy ---> Staff Settings Policy ----> IT Staff Settings Policy ---> AD Account Settings

    The AD settings for the inividual user will override group policy.

    Regards

    Kevin
    Which is the way I was [ self taught ] - thanks for confirming.

  6. #5
    mjs_mjs's Avatar
    Join Date
    Jan 2009
    Location
    bexleyheath, london
    Posts
    1,018
    Thank Post
    37
    Thanked 111 Times in 95 Posts
    Rep Power
    37
    Quote Originally Posted by mrmontymick View Post
    No, it doesn't. Settings work from furthest to nearest, and the account settings will take precedence as it is nearest the user. Hope that makes sense....

    For example ->

    If you had a user in an OU heirarchy such as below it would be applied in this order:

    Domain Default Policy ---> Staff Settings Policy ----> IT Staff Settings Policy ---> AD Account Settings

    The AD settings for the inividual user will override group policy.

    Regards

    Kevin
    I can confirm this as some accounts i use have passwords set not to expire at the user level, and that overrides the GPO policy.

SHARE:
+ Post New Thread

Similar Threads

  1. Quick RDP question
    By m1ddy in forum Windows
    Replies: 4
    Last Post: 16th September 2009, 10:03 AM
  2. Quick question
    By chrbb in forum EduGeek Joomla 1.0 Package
    Replies: 2
    Last Post: 4th May 2008, 01:40 PM
  3. Quick question
    By Elky in forum General Chat
    Replies: 1
    Last Post: 29th June 2007, 11:14 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •