Forum Discussion
How to fully remove domain password policy from on-prem AD
Hi @Claire_,
thanks for the update. You did everything right.
To ensure that the password policy is applied to the Active Directory domain controllers, you need to apply the policy directly to the OU where the domain controllers are located. Modifying the Default Domain Policy, which is linked at the root of the domain, may not have the desired effect if inheritance is blocked on the Domain Controllers OU. Make sure to target the policy specifically to the Domain Controllers OU to control the password policy for the Active Directory.
Please, check out this links:
Password policy changes aren't applied - Windows Server | Microsoft Learn
Changes are not applied when you change the password policy - Microsoft Support
Please click Mark as Best Response & Like if my post helped you to solve your issue. This will help others to find the correct solution easily. It also closes the item. If the post was useful in other ways, please consider giving it Like.
Kindest regards
Leon Pavesic
LeonPavesic Inheritance on the DC's OU is not blocked, and the domain controllers are in the correct OU, and the password policy is not coming from any other GPO.