With Windows Server 2008 Active Directory you finally have the option to set multiple password policies. Check this blogpost for details: http://blogs.technet.com/jeffa36/archive/2007/10/31/windows-server-2008- password-policies.aspx Perhaps there is a third party tool that can help you out on 2000/2003.. Van: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] Namens Jerry Williams Verzonden: donderdag 2 oktober 2008 17:28 Aan: gptalk@xxxxxxxxxxxxx Onderwerp: [gptalk] Default Domain Policy and Account Lockout I have Windows 2003 AD and have the account lockout threshold set on the Default Domain Policy. I have an account in an OU that I would like to NEVER get locked out. Is there any way to make the Default Domain Policy not effect this user? I have tried to enable the block policy inheritance option, but that seems to have no effect. Any ideas?