Hello! I installed win2008r2 sp1 as domain controller (domain level = 2008) + win7 workstation no matter what I do with password policy (in Default Domain Policy) - it is not applied. Like "tatoo effect", old policy still works. if I 1) remove link to Default Domain Policy 2) add link back new settings are applied. is it known behaviour, where can I read about it ? Ilya Shipitsin

Hello, Please refer similar threads and see if they help in your case. Old Group Policy settings remain on machines http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/9aa817a2-06d6-4cc6-be67-bb5625e2bf19 Restore GPO "Default Domain Policy" in Windows Server 2008 http://social.technet.microsoft.com/Forums/en/winserverGP/thread/c11c5764-d0f9-4494-817c-b098dc272224 Vote As Helpful, if you find my information useful ! This posting is provided "AS IS" with no warranties or guarantees and confers no rights.

Hello, never had any problems making changes to password account lockout settings. Did you verufy on the client with rsop.msc that changes are shown? Do you work with imaged machines that are prepared with sysprep?Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Hello, Please refer similar threads and see if they help in your case. Old Group Policy settings remain on machines http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/9aa817a2-06d6-4cc6-be67-bb5625e2bf19 Restore GPO "Default Domain Policy" in Windows Server 2008 http://social.technet.microsoft.com/Forums/en/winserverGP/thread/c11c5764-d0f9-4494-817c-b098dc272224 Vote As Helpful, if you find my information useful ! This posting is provided "AS IS" with no warranties or guarantees and confers no rights.