As part of DSfW provisioning, the Universal Password Policy is enabled on the partition that is being mapped to a domain. This is extended to cover all the partitions that are mapped to a particular DSfW domain.
However, if the Universal Password Policy is already enabled in your environment and if you don't want to override it, then you must select the Retain existing Novell Password Policies on Users check box during DSfW installation. Selecting this check box will mean that the already enabled Universal Password Policy in your environment is applicable to all the partitions that is being planned to be mapped to a particular DSfW domain. If you do not select this check box, then the users belonging to a partition (mapped to a DSfW domain) that does not have Universal Password Policy defined, will not be able to login to the DSfW domain.
For Universal Password Policies defined in your DSfW environment, you must ensure that you select the Synchronize Distribution Password when setting Universal Password check box in iManager.
Start a browser and point to http:// ip_address_of_server/nps/iManager.html.
For example, http://192.168.1.1/nps/iManager.html.
Accept the certificate, enter the Administrator account/password and eDirectory tree, and click Login.
Select Passwords > Password Policies.
Click the password policy, then click Universal Password > Configuration Options.
Select the Synchronize Distribution Password when setting Universal Password check box.
If you do not select this check box, you will experience password synchronization issues.