hi,
in our organisation we have a password policy configured on windows 2008 R2 default domain policy... with at least 7 characters, password age 90 days.
now our management want to change it with 8 characters...
now i am planning to deploy GP on OU level not on default domain policy... hence i created a new policy and applied it to a OU but it inherits with default domain policy...
even i created the new OU for testing.. and on the OU - right click - ckeck the "block inheritance" even no use... still the new policy not applying to the test OU.
need an expert light on it... with a best practice...
Note: the policy we want to deploy OU wise and then want to remove the password policy from the default domain policy.
thanks in advance