Windows 2000 server

[bruinator]

Guys, I am trying to set up a domain wide account policy but I am unsure of how to do this. Can someone please help me out? I have active directory installed on the server and wins. Not sure if that info is relevent or not. I appreciate any help given.

thank you.

[Midknyte]

You need to look at group policy.

labmice has some good articles:
http://labmice.techtarget.com/

[bruinator]

Can you please be a little more specific. I would appreciate it.

[bruinator]

Is this what I need to do?

Add the Security Templates Snap-In to a Microsoft Management Console (MMC) Console
To add the Security Templates snap-in to a MMC console, follow these steps: 1. Click Start, and then click Run.
2. In the Open box, type mmc, and then click OK.
3. On the File menu, click Add/Remove Snap-in.
4. In the Add/Remove Snap-in dialog box, click the Standalone tab, and then click Add.
5. In the Add Standalone Snap-in dialog box, click Security Templates, click Add, click Close, and then click OK.
6. In the console tree, expand Security Templates, and then expand %SystemRoot%\Security\Templates.

A list of predefined security templates and their descriptions appears in the right pane.

Create and Define a New Security Template
To define a new security template, follow these steps: 1. In the console tree, expand Security Templates.
2. Right-click %SystemRoot%\Security\Templates, and then click New Template.
3. In the Template name box, type a name for the new template.

If you want, you can type a description in the Description box, and then click OK.

The new security template appears in the list of security templates. Note that the security settings for this template are not yet defined. When you expand the new security template in the console tree, expand each component of the template, and then double-click each security setting that is contained in that component, a status of Not Defined appears in the Computer Setting column.
4. To define Account Policies, Local Policies, or Event Log policies, follow these steps: a. In the console tree, expand the component that contains the security setting that you want to configure.

For example, to set a maximum password age policy, expand Account Policies.
b. In the right-pane, double-click the security setting that you want to configure.

For example, to set the maximum password age policy, double-click Password Policy, and then double-click Maximum password age.
c. Click to select the Define this policy setting in the template check box, specify the option or setting that you want as appropriate to the security setting, and then click OK.

5. To define a Restricted Groups policy, follow these steps: a. Right-click Restricted Groups, and then click Add Group.
b. Click Browse.
c. In the Select Groups dialog box, type the name of the group that you want to restrict access, click OK, and then click OK.
d. In the GroupName Properties dialog box, under Members of this group, click Add Members to add the members that you want to the group.

To add this group as a member of another group, under This group is a member of, click Add Groups.
e. Click OK.

6. To define a System Services policy, follow these steps: a. Expand System Services.
b. In the right pane, double-click the service that you want to configure.
c. Specify the options that you want, and then click OK.

7. To define security for registry keys, follow these steps: a. Right-click Registry, and then click Add Key.
b. In the Select Registry Key dialog box, click the registry key that you want to define security for, and then click OK.
c. In the Database Security for RegistryKey dialog box, specify the permissions that you want for the registry key, and then click OK.
d. In the Add Object dialog box, specify how you want permissions on this key inherited, click OK, and then click OK.

8. To define security for files or folders, follow these steps: a. Right-click File System, and then click Add File.
b. In the Add a file or folder dialog box, click a file or folder that you want to add security to, and then click OK.
c. In the Database Security for FileName or FolderName dialog box, specify the permissions that you want, click OK, and then click OK.

[Midknyte]

What are you trying to do specifically? you can either use templates or you can manually select the policies you want to change.

[bruinator]

I would like to manually select the policies i want to change and if you could tell me how to set up a domain wide account policy I would greatly appreciate it.

[Midknyte]

Account policies are always by the domain. you cannot set account policies by OU. there is only one place to modify account policies, like password length, password age, etc.

[bruinator]

Ok, but could you please explain to me how to do it. I would greatly appreciate it.

[Midknyte]

there are a lot of steps, so it's better to follow a guide.

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/directory/activedirectory/stepbystep/gpfeat.mspx

basically you have to go into the group policy of the domain, and then enable or disable the appropriate policy you want like password length at 8 characters or something.