The Bad news is that setting a fine grain password policy is really hard. The Good news is setting the default password policy for a domain is really easy. Microsoft did introduce Fine Grain Password Policies with Windows Server 2008 however this can only be set based on a security group membership and you still need to use the very un-user-friendly ADSI edit tool to make the changes to the policy.īelow I will go through how you change the default domain password policy and how you then apply a fine grain password policy to your environment. This catches a lot of people out as they apply a password policy to an OU in their AD thinking that it will apply to all the users in that OU…. One strange thing that still seems to catch a lot of people out is that you can only have one password policy for your user per domain.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |