o.k. thanks for clarifiing.
domain password policy: as mentioned above, no change noticable…
user password: I get an error when changing exparation, when the user is a member of a group.
Sep 9 12:18:03 newns7 esmith::event[8160]: Event: password-policy-update
Sep 9 12:18:03 newns7 esmith::event[8160]: Action: /etc/e-smith/events/password-policy-update/S10nethserver-sssd-clear-cache SUCCESS [0.076623]
Sep 9 12:18:03 newns7 esmith::event[8160]: Password complexity activated!
Sep 9 12:18:03 newns7 esmith::event[8160]: Password history length changed!
Sep 9 12:18:03 newns7 esmith::event[8160]: Minimum password age changed!
Sep 9 12:18:03 newns7 esmith::event[8160]: Maximum password age changed!
Sep 9 12:18:03 newns7 esmith::event[8160]: All changes applied successfully!
Sep 9 12:18:03 newns7 esmith::event[8160]: Action: /etc/e-smith/events/password-policy-update/S30nethserver-dc-password-policy SUCCESS [0.492689]
Sep 9 12:18:03 newns7 esmith::event[8160]: Event: password-policy-update SUCCESS
Sep 9 12:18:17 newns7 esmith::event[8238]: Event: user-modify user1@jeckel.lan Testuser 1 /bin/bash
Sep 9 12:18:17 newns7 esmith::event[8238]: Action: /etc/e-smith/events/user-modify/S40nethserver-dc-user-modify SUCCESS [0.18315]
Sep 9 12:18:17 newns7 esmith::event[8238]: Action: /etc/e-smith/events/user-modify/S90nethserver-sssd-clear-cache SUCCESS [0.083343]
Sep 9 12:18:17 newns7 esmith::event[8238]: Event: user-modify SUCCESS
Sep 9 12:18:18 newns7 esmith::event[8260]: Event: group-modify netusers@jeckel.lan user2 user1 domain users s-1-5-4 s-1-5-11
Sep 9 12:18:18 newns7 esmith::event[8260]: ERROR(exception): Failed to remove members “S-1-5-4,S-1-5-11,Domain,Users” from group “netusers” - Unable to find “Domain”. Operation cancelled.
Sep 9 12:18:18 newns7 esmith::event[8260]: File “/usr/lib64/python2.7/site-packages/samba/netcmd/group.py”, line 278, in run
Sep 9 12:18:18 newns7 esmith::event[8260]: add_members_operation=False)
Sep 9 12:18:18 newns7 esmith::event[8260]: File “/usr/lib64/python2.7/site-packages/samba/samdb.py”, line 274, in add_remove_group_members
Sep 9 12:18:18 newns7 esmith::event[8260]: raise Exception(‘Unable to find “%s”. Operation cancelled.’ % member)
Sep 9 12:18:19 newns7 esmith::event[8260]: Added members to group netusers
Sep 9 12:18:19 newns7 esmith::event[8260]: [ERROR] Failed to update the members list of group netusers at /etc/e-smith/events/group-modify/S40nethserver-dc-group-modify line 80.
Sep 9 12:18:19 newns7 esmith::event[8260]: Action: /etc/e-smith/events/group-modify/S40nethserver-dc-group-modify FAILED: 1 [1.135775]
Sep 9 12:18:19 newns7 esmith::event[8260]: Action: /etc/e-smith/events/group-modify/S90nethserver-sssd-clear-cache SUCCESS [0.173449]
Sep 9 12:18:19 newns7 esmith::event[8260]: Event: group-modify FAILED
Sep 9 12:18:19 newns7 esmith::event[8311]: Event: password-policy-update user1@jeckel.lan yes
Sep 9 12:18:19 newns7 esmith::event[8311]: Action: /etc/e-smith/events/password-policy-update/S10nethserver-sssd-clear-cache SUCCESS [0.299921]
Sep 9 12:18:20 newns7 esmith::event[8311]: Expiry for user ‘user1’ set to 180 days.
Sep 9 12:18:20 newns7 esmith::event[8311]: Action: /etc/e-smith/events/password-policy-update/S30nethserver-dc-password-policy SUCCESS [0.486807]
Sep 9 12:18:20 newns7 esmith::event[8311]: Event: password-policy-update SUCCESS
Event: password-policy-update SUCCESS
something wrong with cn=domain or something like this?
If the user is no member of a group, no error apears.
If a empty group is created, message: “Task completed with errors” apears. But I think this is ment to this way (or better: this would be logical 
)