One of our administrators has asked for a list of all policies that share the password policy's "one per domain" limitation (for lack of a better discription). I've hunted through Google and Microsoft but I can't find such a list. Does anyone know of such a list or of a rule that defines such policies? The idea is to provide OU admins a list of unmodifiable policies so they don't waste time trying to modify them.
Thank you.
This conversation is currently closed to new comments.
This is a bit of pithy answer so I'll write a blog article which will explain it a bit more at some point soon but basically anything that is created at the domains level will be applied to everything in the domain. There are certain policies such as password policy, account lockout and so on that are ONLY relevant for a single domain.
If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.
AD password policies are domain wide, are there other such policies?
Thank you.