Account policies
I run Windows 2000 server at home, SP1 with Active Directory. I created lokout policy from MMC console and tested it. It did not work. When I went to domain security from program menu, the account lockout policy displays as”not define”. I create it again and put the previous account lockout policy as ” not define” at MMC console. I tested it. It the acccount lockout policy works when I set it at Domain Security policy.
Now I found another menu “Domain Controller Security”from program menu. I see another “account lockout policy” display as “not define”
So far, I have seen the Account Lockout Policy in three different areas: MMC(I added it), Domain Security Policy, and Domain Controller Security Policy.
Does anyone knows their differences and their control abilities.
Thanks for any recommendations.