Windows 2000 Server, Active Directory GPO issues

Discussion in 'Windows Desktop Systems' started by jkoXP, Jan 14, 2003.

  1. jkoXP

    jkoXP Guest

    I have a Windows 2000 Domain, with Win2k Server, Active Directory running, etc.

    I am trying to set the GPO for the domain, but, whenever I try to change the password policies, such as:
    setting a min pass length, or any of the password options, and save the GPO, I try to create a test user account- to test the new settings, it will not let me create a new acct.

    I have the min pass set to 4, and when i put in a 6 char pass, it says it does not meat the password requirements or something to that affect.... So I have to restore the backup of the working AD.. which is annoying.

    What am I doing wrong?
     
  2. Terrahertz

    Terrahertz Extinction Agenda Political User Folding Team

    Messages:
    972
    Location:
    New York
    Try setting the minimum to 6 and see what happens. You have the latest patches and such installed right?
     
  3. jkoXP

    jkoXP Guest

    everything else works great, before I set the new GPO options the user accts are setup just fine, I can log on with them, etc.

    its just after all of the GPO pass changes, I cannot create any new user accts due to the error I listed above..
     
  4. oDin

    oDin xp m0nk3y

    Messages:
    368
    Location:
    vancouver, bc
    how are you applying the GPO...are you applying at the Domain level or at the OU level??
     
  5. jkoXP

    jkoXP Guest

    domain
     
  6. oDin

    oDin xp m0nk3y

    Messages:
    368
    Location:
    vancouver, bc
    that might be your problem then. GPOs are applied in the following order:
    1. local
    2. site
    3. domain
    4. ou
    (its easy to remember LSD:cool:OU)

    that means that any policys applied at the local level are overridden by policys applied at the site, domain and ou level. policys applied at the ou level are applied last and policys applied at the local level are applied first. have a look at the ou policy and see if there are any settings that conflict with what you have set in the domain policy.
     
  7. jkoXP

    jkoXP Guest

    its a clean install, so everything is default. I want to set policies so that the pass has to be atleast 4 chars... when I set that, it mess' up, but ill try applying the gpo at the out level