Information Technology Reference
In-Depth Information
The local user password policy is inherited from the Default Domain Policy and can't be over-
ridden for domain joined computers. If you have to set a different local user password policy
for a subset of computers, place those computers in a separate OU and define the password
policy for that OU. For example, TreyResearch.net has an OU named Win81 with two comput-
ers in it. I defined a password policy and linked it to that OU, as shown in Figure 5-31.
FIGURE 5-31
The Group Policy Management console
The Win81 Password Policy has a more relaxed password policy with a Maximum Password
Age of 70 days, a Minimum Password Age of 0 days, and a Minimum Password Length of 7
characters. All other settings it inherits from the Default Domain Policy. As shown in Figure
5-32, this policy has been set on computers in the Win81 OU.
FIGURE 5-32
The Local Group Policy Editor on Trey-Win81-21
