All the time I thought the Default Domain Policy overwrites other policies as it is the most important. I also known that having 2 Password GPO is not correct. The way to have different policies is to use faine-grained password policy.
Today at my company I noticed that in our domain I have Password policy in Default Domain Policy with specified length and maximum password age 90 days). To the other OU, which contains only FTP servers, I have another policy with different password complexity and maximum password age 0 days).
I checked which policy wins using gpresult and FTP server shows that Default Domain Policy does not wins.
I cannot test it. Which polisy is really applied to those FTP servers? I was reading all the time, that it must be just one policy for whole domain. Maybe it was just good practice, but such policy normally works? I am really confused.
BTW. Default Domain Policy has also different User Rights Assigment and it is also not forced to other servers, where the habe another policies with User Rights Assigment used.