Hi, I've been trying to get my head around managing users on a Win2K system, and I've noticed two things. 1. I want to change the password expiry for users; the on-line help advises to use MMC to amend group policy, but I can't find any way of doing this? 2. Whilst playing around in MMC, I've discovered all sorts of useful user options. The thing is, I'd love to assign certain setttings to certain groups of users, but I can't understand how to assign these policies to groups. Does that make sense?? Any help would be much appreciated!

It sort of makes sense. Do you have a domain? If so, you could create OUs within your AD structure and apply the policy to an OU. Or you could create a group policy and then set the permissions to "Apply group policy" to certain users. Do you have a domain or are you trying to do this on individual machines?

Group policy can only be applied from a Server, therefore, assuming you are using Win2k Server the answer to your points are as follows in respect of setting up groups and applying policy settings and configuring password expiry settings: Go straight into Active Directory and create an Organisational Unit or select an existing OU - right click on the OU, Properties and select the Group Policy tab. Click on 'New' - give the policy object a name - then click 'Edit' to edit the policy settings. That's how to create a policy in the first place - it's up to you what settings you configure for users. To set the password expiry settings go to 'Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy and select one of the categories. Good luck!