Windows Server - Account/Password Policy Using GPO Not Working

Asked By Josh Graves

07-May-08 04:19 AM

(x-posted in microsoft.public.windows.security)

Hello All,

I have a Windows 2003 AD based domain with primary and backup domain
controllers.  Client workstations are 95% Windows XP, 4% Mac, and 1%
Windows 2000.

I modified the default domain policy to set password minimum
requirements and expiration as well as account lock-outs.  However,
these policies are not taking effect on any workstation (I understand
the Macs are pretty much out of the picture for this).  I have done
this before on other domains successfully.

Other existing group policy objects are working fine, both within the
default domain policy and other add-on policies for proxy servers,
WSUS, etc.

When I review the RSoP, I receive an error within the Security section
of the Component Status stating, "Security failed due to the error
listed below and failed to log the resultant set of policy
information."  However, there is no "error listed below"

Any help would be greatly appreciated.

11-May-08 10:19 AM

Josh,
have you considered reapplying default security templates on your
DC/desktops? For details refer to
http://technet2.microsoft.com/windowsserver/en/library/bcfa2788-4b48-4868-b711-b87cace5179b1033.mspx?mfr=true

hth
Marcin

12-May-08 11:53 PM

Thank you.  I will try that and let you know if it resolves my problem.

12-May-08 11:53 PM

This resolved it.

Thank you very much.