Are you talking about changing the local admin password? That can be done with the GPP extensions now, just so you know. No scripting required! ________________________________ From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Harry Singh Sent: Wednesday, July 16, 2008 9:27 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Password policy Thanks Darren. I fully understand now. One of items i'm currently researching is how to change the local admin accounts for computers orginization-wide. I've seen some scripts that would accomplish this but still haven't tested anything just yet. On Wed, Jul 16, 2008 at 10:14 AM, Darren Mar-Elia <darren@xxxxxxxxxx> wrote: It does. That is what I'm saying. Local user accounts on local machines will be use the account policy that is dictated by the domain policy, unless you block it. Darren From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Harry Singh Sent: Wednesday, July 16, 2008 7:09 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Password policy Thanks Darren. The way i was reading it before lead me to belive that the domain policy affects the user accounts on the local machines. On Wed, Jul 16, 2008 at 10:04 AM, Darren Mar-Elia <darren@xxxxxxxxxx> wrote: What happens is that, since the policy is linked to the domain, all computer accounts will process it. This means that the domain policy will override the local policy on those computers just like it would for any other setting. You can, of course, set Block Inheritance on any OU that you don't wish to have receive that policy. Darren From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Harry Singh Sent: Wednesday, July 16, 2008 6:53 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Password policy I was hoping to get some clarity on this-- by setting a domain policy accounts on the local machine get affected ? Or the domain passwd policy overwrites any passwd policy set locally on a machine ? On Wed, Jul 16, 2008 at 9:47 AM, Darren Mar-Elia <darren@xxxxxxxxxx> wrote: Dave- Yes, it will. Darren From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Dave Palombi Sent: Wednesday, July 16, 2008 6:00 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Password policy Hey guys, I just implemented a password policy for our domain. With this affect local computer accounts as well? I do know that domain policies super seed local computer polices. Thanks, Dave Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged. If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.