[gptalk] Re: Password policy

  • From: "Harry Singh" <hboogz@xxxxxxxxx>
  • To: gptalk@xxxxxxxxxxxxx
  • Date: Wed, 16 Jul 2008 10:27:25 -0400

Thanks Darren.

I fully understand now.

One of items i'm currently researching is how to change the local admin
accounts for computers orginization-wide. I've seen some scripts that would
accomplish this but still haven't tested anything just yet.



On Wed, Jul 16, 2008 at 10:14 AM, Darren Mar-Elia <darren@xxxxxxxxxx> wrote:

>  It does. That is what I'm saying. Local user accounts on local machines
> will be use the account policy that is dictated by the domain policy, unless
> you block it.
>
>
>
> Darren
>
>
>
> *From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On
> Behalf Of *Harry Singh
> *Sent:* Wednesday, July 16, 2008 7:09 AM
> *To:* gptalk@xxxxxxxxxxxxx
> *Subject:* [gptalk] Re: Password policy
>
>
>
> Thanks Darren.
>
> The way i was reading it before lead me to belive that the domain policy
> affects the user accounts on the local machines.
>
> On Wed, Jul 16, 2008 at 10:04 AM, Darren Mar-Elia <darren@xxxxxxxxxx>
> wrote:
>
> What happens is that, since the policy is linked to the domain, all
> computer accounts will process it. This means that the domain policy will
> override the local policy on those computers just like it would for any
> other setting. You can, of course, set Block Inheritance on any OU that you
> don't wish to have receive that policy.
>
>
> Darren
>
>
>
> *From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On
> Behalf Of *Harry Singh
> *Sent:* Wednesday, July 16, 2008 6:53 AM
> *To:* gptalk@xxxxxxxxxxxxx
> *Subject:* [gptalk] Re: Password policy
>
>
>
> I was hoping to get some clarity on this-- by setting a domain policy
> accounts on the local machine get affected ? Or the domain passwd policy
> overwrites any passwd policy set locally on a machine ?
>
> On Wed, Jul 16, 2008 at 9:47 AM, Darren Mar-Elia <darren@xxxxxxxxxx>
> wrote:
>
> Dave-
>
> Yes, it will.
>
>
>
> Darren
>
>
>
> *From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On
> Behalf Of *Dave Palombi
> *Sent:* Wednesday, July 16, 2008 6:00 AM
> *To:* gptalk@xxxxxxxxxxxxx
> *Subject:* [gptalk] Password policy
>
>
>
> Hey guys,
>
> I just implemented a password policy for our domain.  With this affect
> local computer accounts as well?  I do know that domain policies super seed
> local computer polices.
>
> Thanks,
>
> Dave
>
>
>
>
>

Other related posts: