Password Policy on the Default Domain Policy for a certain security group

i'm trying modify default domain policy previous administrator set password age 0 days.

i want enforce password change users rebuked management limit finance group first.

i changed password age 90 days , set security filtering (removed authenticated users) newly created global security group. however, did net user check on users within group. password expires still showing "never".

did wrong?

will appreciate if can enlight me on this..

regards,

dan

password expiration computer setting, not user setting. in other words, have apply group of computers, not group of users. , yes, means if user logs on workstation a, may asked change password if logs on workstation b, it's fine.

you use known 'fine grained password policies'

http://technet.microsoft.com/en-us/library/cc770394(v=ws.10).aspx

but need bit more work since more complex set creating policy , applying group.

Windows Server  >  Group Policy