Software

Ask something
Discussion Locked

Account Policies

0 helpful
1 reply

by shanghai sam

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Good morning peers,
I am on the Final test prep for win2000 mcse.Studying exam 70-219,design AD Services.Their lies one area of conflict in account policies.For my 70-240 exam studied "Mark Minasi-Mastering win2000 server.For those who have studiedthat,On page 562 Ch 8-Different account Policies"Account Policies can only be set on Domain wise basis.Early in Beta process you could set on OU by OU basic rather than domain-domain,But we cannot.OK Now the book I am studying -New Riders "windows2000 Directory Service Design" by Scott E Archer an Exercise(page 327) for those who have The Literature,Goes to create OU And Assign account policy through Gpo to the OU.Where am I Confused.If I recall correctly in my 70-240 exam I did have a Question regarding 2 Domain requiring different account policy & I responded with You must set up separate Domains.Any thoughts would be most welcome And Thanx Aziz

1 reply

by timwalsh

Okay, I think this answer will work for you.
From the Win2K Server Resource Kit, Distributed Systems Guide:

"Some of the policy areas apply only to the scope of a domain, that is, the policy settings are domain-wide. Account policies, for example, apply uniformly to all user accounts in the domain. You cannot define different account policies for different organizational units in the same domain.

Of the security policy areas, Account policies and Public Key policies have domain-wide scope. All other policy areas can be specified at level of the organizational unit."

Although these policies can be set at the OU level, they are effectively ignored by the DC.

This discussion is closed to new replies.