General discussion

Locked

Password Policies are Locked down

By trobison ·
I was under the impression in windows 2003 that the Administrator could change everything. It appears that this is false becuase when I go in to change the local machine policies, they setings are greyed out...and cant be changed. There is a lock icon on the floders as well.

This conversation is currently closed to new comments.

6 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by dryflies In reply to Password Policies are Loc ...

If you are talking windows server 2003 then the security policies are set under a group policy object for an Organizational Unit and then combined with the policy as set in the local security policy. I do not understand the rules of how they are applied but you can look at the settings "as applied" to see the end result. If you cannot change the setting in local security policy then you need to identify the group policy object that is implementing those settings and change them there. You will no you found the right group or unit when the settings are not grayed out.

Collapse -

by dryflies In reply to Password Policies are Loc ...

If you are talking windows server 2003 then the security policies are set under a group policy object for an Organizational Unit and then combined with the policy as set in the local security policy. I do not understand the rules of how they are applied but you can look at the settings "as applied" to see the end result. If you cannot change the setting in local security policy then you need to identify the group policy object that is implementing those settings and change them there. You will no you found the right group or unit when the settings are not grayed out.

Collapse -

by BFilmFan In reply to Password Policies are Loc ...

Run an RSOP on the involved system. You should be able to see what policies are being applied and from which domain, site or OU they are being applied from.

A local administrator cannot over-ride a domain, site or OU applied policy.

A domain administrator or a user account which has been granted the rights to manage user and workstation objects with FULL CONTROL can.

Collapse -

by trobison In reply to Password Policies are Loc ...

Ok, how do I tell what group policy is making my life miserable? Is there a tool? I also messed up a bit....its in Windows XP....not 2003....

Collapse -

by mm212 In reply to Password Policies are Loc ...

Password policies are usually applied at the domain level, typically in the default domain policy. Of course, not always, but every one I've seen is applied from there.

Collapse -

Other Domains

by mcfudge47 In reply to Password Policies are Loc ...

We often have users move from other domains. We take it off of their domain and then we can change the local security policies.

Back to Security Forum
6 total posts (Page 1 of 1)  

Related Discussions

Related Forums