[gptalk] Re: Password policy

  • From: "Nelson, Jamie" <Jamie.Nelson@xxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Wed, 16 Jul 2008 09:29:42 -0500

Are you talking about changing the local admin password? That can be
done with the GPP extensions now, just so you know. No scripting
required!

________________________________

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Harry Singh
Sent: Wednesday, July 16, 2008 9:27 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Password policy


Thanks Darren.

I fully understand now.

One of items i'm currently researching is how to change the local admin
accounts for computers orginization-wide. I've seen some scripts that
would accomplish this but still haven't tested anything just yet.




On Wed, Jul 16, 2008 at 10:14 AM, Darren Mar-Elia <darren@xxxxxxxxxx>
wrote:


        It does. That is what I'm saying. Local user accounts on local
machines will be use the account policy that is dictated by the domain
policy, unless you block it.

         

        Darren

         

        From: gptalk-bounce@xxxxxxxxxxxxx
[mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Harry Singh
        Sent: Wednesday, July 16, 2008 7:09 AM 

        To: gptalk@xxxxxxxxxxxxx
        Subject: [gptalk] Re: Password policy

        

         

        Thanks Darren.
        
        The way i was reading it before lead me to belive that the
domain policy affects the user accounts on the local machines.

        On Wed, Jul 16, 2008 at 10:04 AM, Darren Mar-Elia
<darren@xxxxxxxxxx> wrote:

        What happens is that, since the policy is linked to the domain,
all computer accounts will process it. This means that the domain policy
will override the local policy on those computers just like it would for
any other setting. You can, of course, set Block Inheritance on any OU
that you don't wish to have receive that policy.

        
        Darren

         

        From: gptalk-bounce@xxxxxxxxxxxxx
[mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Harry Singh
        Sent: Wednesday, July 16, 2008 6:53 AM
        To: gptalk@xxxxxxxxxxxxx
        Subject: [gptalk] Re: Password policy

         

        I was hoping to get some clarity on this-- by setting a domain
policy accounts on the local machine get affected ? Or the domain passwd
policy overwrites any passwd policy set locally on a machine ?

        On Wed, Jul 16, 2008 at 9:47 AM, Darren Mar-Elia
<darren@xxxxxxxxxx> wrote:

        Dave-

        Yes, it will. 

         

        Darren

         

        From: gptalk-bounce@xxxxxxxxxxxxx
[mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Dave Palombi
        Sent: Wednesday, July 16, 2008 6:00 AM
        To: gptalk@xxxxxxxxxxxxx
        Subject: [gptalk] Password policy

         

        Hey guys, 
        
        I just implemented a password policy for our domain.  With this
affect local computer accounts as well?  I do know that domain policies
super seed local computer polices.
        
        Thanks,
        
        Dave

         

         



Confidentiality Warning: This message and any attachments are intended only for 
the use of the intended recipient(s), are confidential, and may be privileged. 
If you are not the intended recipient, you are hereby notified that any review, 
retransmission, conversion to hard copy, copying, circulation or other use of 
all or any portion of this message and any attachments is strictly prohibited. 
If you are not the intended recipient, please notify the sender immediately by 
return e-mail, and delete this message and any attachments from your system. 

Other related posts: