When you run the GPResult.exe (Group Policy Results) tool on a Windows Server 2003 PDC emulator, you may receive:
Account Policies ---------------- GPO: Default Domain Policy Policy: MaxServiceAge Computer Setting: 600 GPO: Default Domain Policy Policy: MaxTicketAge Computer Setting: 10 GPO: Default Domain Policy Policy: MinimumPasswordAge Computer Setting: N/A GPO: Default Domain Policy Policy: PasswordHistorySize Computer Setting: 3 GPO: Default Domain Policy Policy: MaxClockSkew Computer Setting: 5 GPO: Default Domain Policy Policy: MinimumPasswordLength Computer Setting: N/A GPO: Default Domain Policy Policy: LockoutBadCount Computer Setting: N/A GPO: Default Domain Policy Policy: MaximumPasswordAge Computer Setting: 43 GPO: Default Domain Policy Policy: MaxRenewAge Computer Setting: 7When you run the GPResult.exe tool on a computer that is not the PDC emulator, you may receive:
Account Policies ---------------- GPO: Default Domain Policy Policy: MaxServiceAge Computer Setting: 600 GPO: Default Domain Policy Policy: MaxTicketAge Computer Setting: 10 GPO: Default Domain Policy Policy: MaxClockSkew Computer Setting: 5 GPO: Default Domain Policy Policy: MaxRenewAge Computer Setting: 7This behavior will occur when you run the GPResult.exe tool on a computer that is not the PDC emulator.
Some policies are designed to be automatically replicated by Active Directory, and are NOT reported on replicas.
0 comments
Hide comments