[ActiveDir] unable to change default domain policy security settings

[Rittenhouse, Cindy]

Our agency recently adopted a new security policy that required changes to the default domain policy security settings, specifically the password policy and account lockout policy. I have change the policy several times, but it keeps reverting back to the previous policy. We have 4 DCs, yesterday I set the policy on DC3 and forced a replication to DC1, DC2, and DC4. I checked each DC and the settings were correct. This morning the policy had reverted to the old settings. I am at a loss. How do I find out what is causing the policy to reset itself to the old settings?

 

Thanks in Advance

 

Cynthia Rittenhouse, MCSE
Network Administrator
County of Lancaster
Lancaster, PA 17602