Hello, we have a Password policy defined in the Default Domain Policy enforced in AD which is working on all our Windows 2008+ machines except recently deployed Windows 2016 machines.
On those machines which are in the appropriate OU, running gpresult /V shows that the Default Domain Policy is applied successfully. Running RSOP also shows that it is enforced. However, if I run "net accounts" from an Administrator command prompt it doesn't show the appropriate settings. Additionally, access the Local group policy, doesn't show the settings, but they are greyed out.
I have removed one of the machines from the OU where this is defined to a test one which blocks inheritance and the settings are available in local policy to change, but are set to Windows defaults.I have gone through all the Group Policies to see if the settings are defined elsewhere and they are not.
The scope of the Default Domain Policy covers the machine.
Does anyone have any idea why the password policy isn't applying correctly? and how to fix it?
Thanks
Gerrard