Deafult Domain Policy not applied to some users/computers

[ajgale1975]

Our company has a large Windows 2003 domain spanning the globe. Recently I was pinged for having around 120 users who were reported to have a zero password length requirement.

The domain has a default domain policy that is applied company wide. There is no inheritance being blocked on any of the OUs. I have indeed checked via gpresult that the default domain policy is being applied to the machines and users who are affected.

The policy states that all passwords must be minimumly 8 characters long yet these 120 users or so can reset their passwords to blank. Other users at the same site and OU are indeed receiving the proper password requirements.

Has anyother heard of this issue before or have any suggestions?

[Sauk]

You can use the user for the group policy set for reading DENY that overrides everything. Moreover, you do when you use the Group Policy Editor which is automatically installed when SBS 2003. Go in the Group Policy editor can click Default Domain Policy and then click on delegation. Then go in Advanced and Add the account . Take care however, that it is the computer account because the password policies are computer settings, not user settings and click Then Apply Group Policy each click Deny.