The password settings in the Default Domain Policy always reign supreme when a user logs on to the domain. This prevents OU administrators from circumventing the domain password policy. However, if you choose to assign a password GPO to the OU level, it will enforce those settings when a user logs on locally to their computers. Jeremy discusses this thoroughly in Chapter 8 of his book.
- GP Health Check»
- About Us»