Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Applies to
- Windows 11
- Windows 10
An overview of account policies in Windows and provides links to policy descriptions.
All account policies settings applied by using Group Policy are applied at the ___domain level. Default values are present in the built-in default ___domain controller policy for Password Policy settings, Account Lockout Policy settings, and Kerberos Policy settings. The ___domain account policy becomes the default local account policy of any device that is a member of the ___domain. If these policies are set at any level below the ___domain level in Active Directory Domain Services (AD DS), they affect only local accounts on member servers.
Note
Each ___domain can have only one account policy. The account policy must be defined in the default ___domain policy or in a new policy that is linked to the root of the ___domain and given precedence over the default ___domain policy, which is enforced by the ___domain controllers in the ___domain. These ___domain-wide account policy settings (Password Policy, Account Lockout Policy, and Kerberos Policy) are enforced by the ___domain controllers in the ___domain; therefore, ___domain controllers always retrieve the values of these account policy settings from the default ___domain policy Group Policy Object (GPO).
The only exception is when another account policy is defined for an organizational unit (OU). The account policy settings for the OU affect the local policy on any computers that are contained in the OU. For example, if an OU policy defines a maximum password age that differs from the ___domain-level account policy, the OU policy will be applied and enforced only when users sign in to the local computer. The default local computer policies apply only to computers that are in a workgroup or in a ___domain where both an OU account policy and a ___domain policy don't apply.
In this section
| Topic | Description |
|---|---|
| Password Policy | An overview of password policies for Windows and links to information for each policy setting. |
| Account Lockout Policy | Describes the Account Lockout Policy settings and links to information about each policy setting. |
| Kerberos Policy | Describes the Kerberos Policy settings and provides links to policy setting descriptions. |