[gptalk] Re: Default Domain Policy and Account Lockout

  • From: "Jake (sanfranjake)" <sfj@xxxxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Thu, 2 Oct 2008 17:32:54 +0200

With Windows Server 2008 Active Directory you finally have the option to
set multiple password policies. 

Check this blogpost for details:



Perhaps there is a third party tool that can help you out on 2000/2003..


Van: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
Namens Jerry Williams
Verzonden: donderdag 2 oktober 2008 17:28
Aan: gptalk@xxxxxxxxxxxxx
Onderwerp: [gptalk] Default Domain Policy and Account Lockout


I have Windows 2003 AD and have the account lockout threshold set on the
Default Domain Policy.  I have an account in an OU that I would like to
NEVER get locked out.  Is there any way to make the Default Domain
Policy not effect this user?  I have tried to enable the block policy
inheritance option, but that seems to have no effect.  Any ideas? 

Other related posts: