Tuesday, January 26, 2016

Why my Domain Password Policy Not Applying?

Back in 2009 I published a very popular article "The Low-Down on Password Policies" which has been viewed by thousands of IT Professionals and referenced by application vendors in online documentation such as SysOp Tools Software.

http://clintboessen.blogspot.com.au/2009/12/low-down-on-password-policies.html

In this post we are going to talk about password policies further and cover off what appears to be a bug but is actually "by design".

My customer had a handful of domain controllers with a single 2008 R2 domain controller and three Server 2012 R2 domain controllers.  The PDC Emulator resides on Server 2008 R2.

The Server 2008 R2 domain controller was applying the password policy correctly however the 2012 R2 domain controllers were not (or so I thought).

Running an rsop.msc on the 2008 R2 domain controller (the PDC) shows the policy being applied from the Default Domain Policy.

 
 The 2012 R2 domain controllers the resultant set of policy displayed no policies being applied.


The same was experienced running an "gpresult /v" on the 2008 R2 or 2012 R2 domain controllers.

"gpresult /v" on 2008 R2:

 
"gpresult /v" on 2012 R2:
 
 
The account policies above are the domain Kerberos policy, not the password policy.
 
The password policy simply did not apply to the 2012 servers.  After further investigation in my test lab, I saw that only the domain controller running the PDC emulator displays the password policy when performing a Resultant Set of Policy.
 
This means every domain controller in a domain will not display the password policy from a resultant set of policy apart from the primary domain controller.
 
How do I check if the password policy is applying correctly on my domain controllers?
 
There are two commands which check the password policy:
  • net accounts (checks local password policies on a server)
  • net accounts /domain (checks the domain password policy on a server)
 
 
 
Domain Policy always wins over a local policy.
 
Computer Role: Backup means it is not a Primary Domain Controllers (PDC).
 
So in summary... if you see a password policy not applying to a domain controller when you check Group Policy, this is normal behaviour and is by design unless the server is the PDC emulator.

12 comments:

  1. My life became devastated when my husband sent me packing, after 8 years that we have been together. I was lost and helpless after trying so many ways to make my husband take me back. One day at work, i was absent minded not knowing that my boss was calling me, so he sat and asked me what its was all about i told him and he smiled and said that it was not a problem. I never understand what he meant by it wasn't a problem getting my husband back, he said he used a spell to get his wife back when she left him for another man and now they are together till date and at first i was shocked hearing such thing from my boss. He gave me an email address of the great spell caster who helped him get his wife back, i never believed this would work but i had no choice that to get in contact with the spell caster which i did, and he requested for my information and that of my husband to enable him cast the spell and i sent him the details, but after two days, my mom called me that my husband came pleading that he wants me back, i never believed it because it was just like a dream and i had to rush down to my mothers place and to my greatest surprise, my husband was kneeling before me pleading for forgiveness that he wants me and the kid back home, then i gave Happy a call regarding sudden change of my husband and he made it clear to me that my husband will love me till the end of the world, that he will never leave my sight. Now me and my husband is back together again and has started doing pleasant things he hasn't done before, he makes me happy and do what he is suppose to do as a man without nagging. Please if you need help of any kind, kindly contact Happy for help and you can reach him via email: happylovespell2@gmail.com

    ReplyDelete
    Replies

    1. windows 10 serial key generator , windows 10 product key crack , wwindows 7 key , windows 10 serial key finder , windows 10 product key 10130 , windows 7 ultimate sp1 keys , keys of windows 7 professnal , windows 7 pro key sale , sOrmfx

      windows 10 pro key

      office 2013 pro key sale

      cheap visual studio key buy

      Delete

    2. !!! “LOVE is the key to LIFE”.DR Ehinome !!!

      My name is Miss Rose Lisa am from Texas, am a woman who love and cherish my husband more than any other thing you can imagine on earth continent. My husband was so lovely and caring after 3years of marriage he was seriously ill and the doctor confirm and said he has a kidney infection that he needed a kidney donor, that was how I start searching for a good Samaritan who can help,doctor has given me a periodic hour that he will live just 26hours left, that was how I ask the doctor if I can be of help to my husband that was how he carried out the text,the confirming was successful, I was now having this taught that since 3 years now we got married I have not be able to get pregnant can I be able to get bring again? That was the question I ask the doctor, he never answer his response was did you want to lost your husband? I immediately reply no I can't afford to loose him. After the operation my husband came back to live and was healthy I was also OK with the instruction given to me by the doctor, after 3months my husband came home with another lady telling me, that is our new wife that will give us kids and take care of us, that was how I was confused and started crying all day, that was how my husband ran away with his new wife Clarabelle. Since then I was confuse don't no what to do that was how I went back to the doctor and tell him everything, he told me that, this is not just an ordinary it must be a spiritual problem that was how he gave me this email (ehinomespellcaster@gmail.com) that I should tell her all my problem that she can help that was how i contacted her and I do as instructed. After 3days and I have done what she ask me to do, my husband start searching for me and went back to the doctor, that was how we well settle she also told me not to worry that I will get pregnant, this month making it the fifth Month I contacted her am now 3months pregnant. These great spell cater is a great man, if you are any kind of problem you can contact him here on his email (ehinomespellcaster@gmail.com) website address: //ehinomespellcaster.yolasite.com you can also call or text me for questions or anything +447031987255. contact him Via whatsapp+2349039545297.

      Delete
  2. What a wonderful spell caster that has brought back happiness to my life, I got married to Jefferson and we loved and cherish ourselves so much, he needs a divorce This is the most wonderful thing i have ever experience!!!! i have never see a great man like Dr happy,indeed he is a powerful man, just last year July i saw some testimony comment on a site people testifying on how they got back their ex with the help of Dr happy,i was amaze to see a great man like this in the world, i was having similar problem with my partner, so we had a little misunderstand that lid to our breakup them so because of that i was very sad and i was thinking of what to do to get him back in my life, a great ideal came into my mind, so i contacted the great Dr and i told him everything that happen he just laugh and said to me that i should not worry that everything will be okay, i believed him because of what on the internet, so today am here testifying of the great happiness he just grant in my life i now have him back forever, thank you very much sir, i really appreciate,your work you have the best spell caster i have ever see on the internet that can really bring loss relationship so my friends out there if you have any problem contact Dr happy for help, he is able to help you in any situation, here is the email happylovespell2@gmail.com

    ReplyDelete
    Replies
    1. LOVE, Happiness, Trust, is the key to LIFE”

      My name is Joyce, I really want to testify to the good work of Dr Zack for what he has don for me . couple of years ago, my husband left home after we had little misunderstanding, he never returned, no phone calls, no letters, no emails and no sign of him anywhere.and at the same time My daughter got sick so ill, things were so tough for me. I had lost hope, 2 years ago, i met a psychic, he said he would help me, i give him a try but all to no nothing happened, i lost hope completely, my daughter\'s situation got worse each day. Last month, i saw a posting concerning the good works of the Spiritual professional(Dr Zack), i told the great man my problem and he told me that there is nothing to be worry about for me contacting him all my problem is solve .. He asked me to provide the spiritual materials needed to cast the spells and of course which i did (Bring Lover back, Healing spell and Career spells). In a matter of Days, my husband called me and told me he was sorry and that he wants to come back to me and that he would explain everything when he comes back, three days later, i got a call from the new job i apply for with an Real Estate company, right now, my daughter\'s is finally healed and my husband is also back finally also i have gotten a job from a big company. I want to thanks prophet Zack,for what he has don for me and my family. you can contact him via email: dr.ozaisspellcaster@hotmail.com he is the solution to all problem i no you are going to be the next to share your testimony to people you can call the great man on +2348036345198. is the best in Africa?

      Delete
  3. FIGLI DI PUTTANA CLAUDIO GENASCI E BERNARDINO BULLA DI BANCA STATO, RICICLAN SOLDI MAFIOSI, CAMORRISTI, NDRANGHETISTI, DI LL LEGA LADRONA E NAZIPEDOFILO, STRAGISTA, PEDOFILO SILVIO BERLUSCONI! VIA GIA' 3 VOLTE IN GALERA: PAOLO BARRAI (CRIMINALE WMO)!
    1
    Ho tantissimo da scrivere su sto Renato Vallanzasca ( in quanto ad indole criminalissima) misto ad Ugo Fantozzi ( in quanto ad essere il piu' grande ciula, perdente, cane in Borsa, brucia risparmi di tutti e sempre, su azioni, obbligazioni, valute, materie prime, case, qualsiasi tipo di investimento... con la differenza che Ugo Fantozzi era simpatico e per bene, a sua nettissima differenza) della finanza piu' filo mafiosa, piu' ricicla soldi mafiosi, piu' razzista e nazifascista, che e' il verminoso avanzo di galera, gia' 3 volte finito in carcere: criminale¿issimo Paolo Barrai, gia' abitante a Milano in Via Ippodromo 105 e nato a Milano il 28.06.1965. Lo faro' gradualmente. Per forza, solo nei ritagli di tempo disponibile. Sono uno dei tantissimi da lui truffato. Mi ha azzerato tutti i risparmi, come accaduto a molti altri come me. Gianni Panni di Modena.
    ---
    Condannato da Consob a pagare ben 70.000 euro di multa per mega truffa fatta da sto verminoso, vi assicuro, pure pederasta stupra bambini ( ne scrivero' molto presto), di Paolo Barrai di malavitosissima Bsi Italia srl di Via Socrate 26 Milano, malavitosissima Wmo Sa Panama, malavitosissimo blog Mercato "Merdato" Libero. Multa connessa a sua mega frode sul fotovoltaico. Che solo a me ( ma anche a Saverio Aiolfi di Parma
    https://it.linkedin.com/in/saverio-aiolfi-a298ab61
    e tantissime persone di tutta Italia e mezza Europa), ha portato via 1.400.000 euro, quasi tutto quello che avevo.
    http://www.consob.it/main/documenti/hide/afflittivi/pec/mercati/2013/d18579.htm
    http://www.bluerating.com/trading/179-promotori/28601-qmultaq-da-70mila-euro-per-un-ex-promotore-che-ha-violato-gli-obblighi-informativi.html
    http://www.finanzaonline.com/forum/trading-line/1454952-barrai-spiega-come-non-pagare-la-tobin-2.html
    http://www.advisoronline.it/albo/consob/22190-consob-sanziona-a-raffica.action
    ---
    Condannato al carcere in Brasile, otto anni di galera sentenziatissimi. Per pedofilia omosessuale, furto, truffa, minacce di morte, stalking via internet, riciclaggio di soldi mafiosi, propaganda razzista, propaganda nazifascista. Ecco i links di inizio indagine. Ora vi e' la sentenza. E' scappato da Porto Seguro di notte, in pieno carnevale 2011, per fuggire a processo e galera. Fate voi di che schifoso topo di fogna parliamo quando parliamo di sto colerico ratto criminalissimo che da sempre e' Paolo Barrai o ratto criminalissimo "Paolo Pietro Barrai" come si e' fatto chiamare in Brasile... per vigliacchissimamente depistare Google.
    http://4.bp.blogspot.com/-aqbT4KlYsmw/TcLbvUUpkeI/AAAAAAAAAe4/TiDPLR0LH_U/s1600/barrai+ind-pag01.jpg
    http://www.portonewsnet.com.br/?mw=noticias&w=2996
    http://www.portonewsnet.com.br/?mw=noticias&w=3004
    http://www.rotadosertao.com/noticia/10516-porto-seguro-policia-investiga-blogueiro-italiano-suspeito-de-estelionato
    http://portoseguroagora.blogspot.be/2011/03/porto-seguro-o-blogueiro-italiano-sera.html
    http://noticiasdeportoseguro.blogspot.be/2011/03/quem-e-pietro-paolo-barrai.html
    http://www.osollo.com.br/online/index.php/crimes/3052-blogueiro-italiano-sera-indiciado-por-estelionato-calunia-e-difamacao-pela-policia-civil-de-porto-seguro
    http://www.geraldojose.com.br/mobile/?sessao=noticia&cod_noticia=13950
    http://mathforum.org/kb/message.jspa?messageID=9837373
    http://4.bp.blogspot.com/-aqbT4KlYsmw/TcLbvUUpkeI/AAAAAAAAAe4/TiDPLR0LH_U/s1600/barrai+ind-pag01.jpg

    ReplyDelete
  4. 3
    Volete ridere istericamente per tirarvi su un po' su, ora, please? Il mega cocainomane, l'auto proclamantesi pedofilomosessuale, il tre volte condannato al carcere fra Milano, Brasile e non solo, il notissimo avanzo di galera Paolo Barrai, scrisse che l'inizio del 2016 sarebbe stato esagerato, opulento, ricco... "Effettivamente" ... lo stiamo vedendo coi nostri occhi. Stiamo notando come tutto precipita ogni giorno. Leggete qui, please. Giusto per spacchiarvi dalle risate un po', por favor...MAI VISTO UN REVERSAL INDICATOR COME IL SEMPRE PEREDENTISSIMO PAOLO BARRAI.... COME IL CIUCCIA PENI DI BAMBINI, ACCLARATO PEDOFILOMOSESSUALE PAOLO BARRAI DI CRIMINALISSIMA WMO SA PANAMA E CRIMINALISSIMA BSI ITALIA SRL DI VIA SOCRATE 26 MILANO.... QUANDO FA COMPRARE, TUTTO CROLLA... QUANDO FA VENDERE, TUTTO SCHIZZA VERSO L'ALTO E SEMPRE
    http://ilpunto-borsainvestimenti.blogspot.com.es/2015/10/il-nuovo-rinascimento-italiano-del-2016.html
    Non basta??? Iamm nnanz. Iam bell, ia'. Fece vendere il Dow Jones, ragliando che sarebbe crollato a 15.000 ed in un mese lo stesso volo' su a a 18.000.
    ( http://ilpunto-borsainvestimenti.blogspot.be/2014/10/dow-jones-atteso-in-area-15000.html)
    Again and again and again... Fece comprare il Gas Naturale a 12 $, 10$, 8$, 6$, 4$ e lo stesso precipito' "appena appena", a seguito, fino a 2$ ( perdita secca del 90%.. da infarto... fate voi, pls)
    http://ilpunto-borsainvestimenti.blogspot.com.es/2010/06/natural-gas.html
    http://www.infomine.com/investment/metal-prices/natural-gas/5-year/
    Fece vendere o non sottoscrivere i Btp e da quel momento son divenuti oro misto a platino.
    http://archiviostorico.corriere.it/2011/novembre/28/Barrai_dico_dieci_motivi_per_co_8_111128030.shtml
    Fece comprare a Mafia, Camorra e Ndrangheta ( suoi veri e soli clienti.. che se ne fregano delle performances, volendo solo lavara capitali assassini), case, in Brasile, nel Marzo 2011, e da allora il Real Brasiliano ha perso "solo" il 70% per cento.
    http://www.xe.com/currencycharts/?from=BRL&to=EUR
    http://www.forexinfo.it/Real-brasiliano-rischia-il-tracollo-tra-crisi-economica-e-politica
    Fece comprare l'oro a 1800 dollari, nell'Estate 2011, ed a seguire, lo stesso, e' "solo" precipitato fino a 1160 dollari.
    http://www.nasdaq.com/markets/gold.aspx?timeframe=10y
    Fece comprare il petrolio a 105 dollari e passa, nella primavera 2014, e lo stesso, e' caduto in un baratro: giu fino a 27 dollari!
    http://www.nasdaq.com/markets/crude-oil.aspx?timeframe=10y
    Raglio' di "de dollarizzazione", a fine 2011, mentre l'euro valeva 1,40 contro un dollaro, e lo stesso dollaro ha poi guadagnato un 30% e passa contro l'euro.
    http://www.xe.com/currencycharts/?from=EUR&to=USD&view=10Y
    Ma vi rendete conto di quanto perdereste tutti i vostri risparmi e vi sputtanereste in tutto il mondo, ad accostarvi a... parole sue.. sto "bevitore di primo sperma di dodicenni", quale il gia' tante volte in galera, verminoso pedofilomosessuale Paolo Barrai di criminalissima Wmo sa Panama e criminalissima Bsi Italia srl di via Socrate 26 a Milano ( indagato al momento in Svizzera, a rischio di arresto a Lugano, come in mezza Italia, pure.. misero in carcere il suo compare di mega riciclaggi di cash assassino e/o Berluscriminale, Andrea Baroni di Tax and Finance Lugano, speriamo che lo stesso accadra' anche a lui ed al piu' presto possibile)? Scritto per mero vostro bene. Questo e' solo un antipastino su chi e' davvero sto mega truffatore e mega avanzo di galera di Paolo Barrai. Fra poco mi stra scatenero' giorno e notte per farlo sapere anche su Marte e Venere, non solo su questo pianeta, sempre, troppo, piu' piccino piccino. A fra non molto. Gianni Panni. Modena. giannipanni@gmx.com

    ReplyDelete
  5. I am so excited to share my story, maybe someone will find it useful is about how i fix my marriage form divorce .! A very big problem occurred in my Marriage seven months ago,between me and my husband .so terrible that he took the case to court for a divorce. he said that he never wanted to stay with me again,and that he didn't love me anymore.So he packed out of the house and made me and my children passed through severe pain. I tried all my possible means to get him back,after much begging,but all to no avail.and he confirmed it that he has made his decision,and he never wanted to see me again. So on one evening,as i was coming back from work,i met an old friend of mine who asked of my husband .So i explained every thing to him,so he told me that the only way i can get my husband back,is to visit a spell caster,because it has really worked for him too.So i never believed in spell,but i had no other choice,than to follow his advice. Then he gave me the email address of the spell caster whom he visited. TEMPLEOFLOVEANDPROSPERITY@GMAIL.COM. So the next morning,i sent a mail to the address he gave to me,and the spell caster assured me that i will get my husband back the next day. What an amazing statement!! I never believed,so he spoke with me, and told me everything that i need to do. Then the next morning, So surprisingly, my husband who didn't call me for the past 7 months, gave me a call to inform me that he was coming back. So Amazing!! So that was how he came back that same day,with lots of love and joy,and he apologized for his mistake,and for the pain he caused me and my children. Then from that day,our relationship was now stronger than how it were before,by the help of a spell caster. So, i will advice you out there if you have any problem contact Dr Frank Ojo, i give you 100% guarantee that he will help you.. Email him at: Templeofloveandprosperity@gmail.com . My name is Amanda Bryan, me & my family live in Toronto, Canada. Thanks for reading .

    ReplyDelete
  6. My life became devastated when my husband sent me packing, after 8 years that we have been together. I was lost and helpless after trying so many ways to make my husband take me back. One day at work, i was absent minded not knowing that my boss was calling me, so he sat and asked me what its was all about i told him and he smiled and said that it was not a problem. I never understand what he meant by it wasn't a problem getting my husband back, he said he used a spell to get his wife back when she left him for another man and now they are together till date and at first i was shocked hearing such thing from my boss. He gave me an email address of the great spell caster who helped him get his wife back, i never believed this would work but i had no choice that to get in contact with the spell caster which i did, and he requested for my information and that of my husband to enable him cast the spell and i sent him the details, but after two days, my mom called me that my husband came pleading that he wants me back, i never believed it because it was just like a dream and i had to rush down to my mothers place and to my greatest surprise, my husband was kneeling before me pleading for forgiveness that he wants me and the kid back home, then i gave Happy a call regarding sudden change of my husband and he made it clear to me that my husband will love me till the end of the world, that he will never leave my sight. Now me and my husband is back together again and has started doing pleasant things he hasn't done before, he makes me happy and do what he is suppose to do as a man without nagging. Please if you need help of any kind, kindly contact Happy for help and you can reach him via email: happylovespell2@gmail.com

    ReplyDelete
  7. How to Get Your Ex Back! Is good I inform everyone here, that sometime we all make mistakes in our relationship and made our relationship to be broken and is also our responsibility to make it work by seeking for solution to it, I'm very happy today to tell you little of my relationship problem, i cheated once on my wife and she caught me and she was ready to end our marriage because i truly love her i quickly seek for solution to stop her that is when i came across Dr Unity who has help so many people restore their broken marriage and relationship i also contact him today my marriage is restored, I'm going to drop his contact so that does having the same issues can contact him for solution on:Unityspelltemple@gmail.com or call him through his mobile number: +2348072370762.

    ReplyDelete
  8. Just few weeks ago I saw a comment about Dr. Ekpen Temple, someone talking about how he has help him in his relationship break up, I also contacted him because i was facing the same problem in my relationship, today i can boldly recommend Dr. Ekpen Temple to someone who is also facing break up in his or her relationship to contact him for help today because he has help me restore my relationship back to normal, here is he contact details (ekpentemple@gmail.com) or 2347050270218

    ReplyDelete
  9. WOW!! This is the most wonderful thing i have ever experienced. I visited a forum here on the internet on the 17 APRIL 2016, and i saw a marvelous testimony of Tracie Aldana from United States on the forum about the good works DR OSEMU. I never believed it, because have never heard anything about such miracle before. No body would have been able to convince me about it not until DR OSEMU did a marvelous work for me that restored my marriage of 4 years by getting back my divorced wife just as i read on the internet. I was truly shocked when my wife knelt down pleading for forgiveness to accept her back. I am really short of words to use to show my appreciation to DR OSEMU. For his a God sent to me and my entire family for divine restoration of marriage. Here is his email if you need any kind of help. ( Doctorokpamenspelltemple@hotmail.com ), Website: doctorokpamenpowerfulspelltemple.webs.com, call and whats App him on +2348135254384.

    ReplyDelete