Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]

Re: Policy enforcement- Admin accounts

Subject: Re: Policy enforcement- Admin accounts
Date: Tue, 18 Dec 2007 10:54:25 -0800
"mgk.mailing" <mgk.mailing@googlemail.com> said (on 2007/12/18):
Guys.  Afaik you can set in effect password polices on an ou basis.  The
polcies are setup via creation of a GPO and then applied to the OU.
Depending on how inheritance is setup afaik the default settings will
mean that the GPO closest to the active directory object (user /
computer) will take effect.

Mgk

This is incorrect. User accounts, and hence also passwords, belong to
the domain. As such, only domain policies will affect them, as only
domain-wide policies affect the account repository itself.

You will have certainly noticed that password/account policy restrictions
are available in the group policy editor. If you create a policy and apply
it to an OU, it will apply to accounts repositories that live under that
OU. This will not affect domain users, but it will affect local machine
accounts created on any machines within that OU.


<Prev in Thread] Current Thread [Next in Thread>