Well, ideally, you would do the change on the DDP instead of creating a 2nd one, but if you have to, then create the 2nd GPO, modify its settings the way you want them, then link it to the domain at a higher precedence level than the DDP. That should get you the result you want. Darren From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Dave Palombi Sent: Monday, July 14, 2008 11:44 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Password policy Server 2003 It is the default domain policy. I only want to take out the password section. What are the best steps? On Mon, Jul 14, 2008 at 2:43 PM, Darren Mar-Elia <darren@xxxxxxxxxx> wrote: When you say, "Disable it for the other one" Dave, are you asking whether you should undo the settings or disable the whole GPO? Since Account Policy settings can't really be "turned off" I would say that, unless it's the Default Domain Policy you are overriding, I would just unlink the old account policy settings GPO from the domain. Maybe I'm missing something? Darren From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Dave Palombi Sent: Monday, July 14, 2008 11:31 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Password policy Server 2003 Hello, I am recreating a GPO for just a password policy due to the way our network is setup. I do know that I can only have one password policy for windows server 2003. If I recreate the portion for the password section "password policy under security settings" and disable it for the other one, with this work? Thanks, Dave