I really need help with this. So lets say I need to enable password complexity on new users being created in the domain as well as any new users created on computers in that domain. My research shows that I should set all password related policies in default domain policy as there can be only one password policy per domain(2003).

So my question is when I enable password complexity under default domain policy, does it apply to both users created in the domain and also users created on computers/servers in that domain?

Also do i need to enforce default domain policy as well. We have some ous blocking inheritance. Some of these OU,s have server objects that really need this policy.

Thanks for your help!