I thought that this type of Account policy was a Domain wide thing and not a specific OU and that wanting different account policies was one of the reasons one would set up child domains. Douglas Jensen Douglas.Jensen@xxxxxxxxxxxxx Voice (952) 402-9821 Fax (952) 402-9815 Network Administrator Scott Carver Dakota CAP Agency, Inc. 712 Canterbury Road Shakopee, MN 55379 www.capagency.org -----Original Message----- From: Matt Fowler [mailto:mfowler@xxxxxxxxxxxxxxxxx] Sent: Thursday, July 08, 2004 9:06 AM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] 2003 Active Directory, Blank Passwords Trying to setup Group Policies to allow a certain group of users the ability to have blank passwords. However, the only way I can get blank passwords to be allowed is to apply the GPO to the "authenticated users" group. I don't want everyone to have blank passwords, just the users of a specific group that are in a specific OU. What is the correct method for doing this? Should I be linking the GPO to the OU or should I be using security permissions at the domain level? Thanks for any help, Matt Fowler LAN Specialist (847)925-6113 mfowler@xxxxxxxxxxxxxxx ******************************************************** This Weeks Sponsor StressedPuppy.com Games Feeling stressed out? Check out our games to relieve your stress. http://www.StressedPuppy.com ******************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm ******************************************************** This Weeks Sponsor StressedPuppy.com Games Feeling stressed out? Check out our games to relieve your stress. http://www.StressedPuppy.com ******************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm