Re: Password Policy

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Hello Rick,

The only way to progressively roll out a password policy in a Windows
domain is with a third-party password filter that can assign policies
to groups and/or OUs. Setting the "Password Never Expires" option
doesn't remove the password complexity requirements for users, but it
will stop the passwords from expiring, so it may be a suitable solution
for you.

Our company sells a configurable password filter that allows you to
enforce multiple policies and assign them to users, groups, and OUs.
You can find more information at:
http://www.anixis.com/products/ppe/features.htm



Rick wrote:
I am running 2003 AD, I want to setup a password policy for my users ,
but have a couple of questions

1) I want to create a password policy GPO and add groups(s) 2 or 3 at
a time (per management). Can I filter users included in this GPO by
unchecking "apply group policy" on Authenticated Users on the GPO and
check group(s) with "apply group policy" checked?

2) I have all my service accounts in one OU, If I set the "Password
never Expires" setting on these accounts, will that override the
password policy once it is set on these users/groups?

Thanks in advance

Rick

.



Relevant Pages

  • Re: Domain password policy problems
    ... password policies within a single domain. ... Password Policy done right ... If a GPO linked at the domain level applies to all accounts and Gpos ...
    (microsoft.public.windows.group_policy)
  • Re: Which GPO should have password policies enabled - Default Domain P
    ... computer settings in the GPO for a password policy i want to implement. ... GPO is named Password Policy and i did this yesterday but i still dont' see ... there are two different policies for passwords. ... policies ONLY in the Default Domain Policy, ...
    (microsoft.public.windows.server.sbs)
  • Re: PasswordFilter and ASP.NET
    ... I'm pretty sure that the password filter mechanism doesn't allow you to ... check password history, but I may be wrong about that. ... A lot of the password policy you can actually read by querying the DC. ... we are simply trying to prevalidate. ...
    (microsoft.public.platformsdk.security)
  • Re: Quest about password complexity
    ... I've worked on a few password filters, including Password Policy ... Enforcer that you referred to above. ... One serious bug, ... also a couple of bugs and limitations in the password filter ...
    (microsoft.public.win2000.active_directory)
  • RE: Which GPO should have password policies enabled - Default Domain P
    ... I'm having some problems trying to set up a password policy. ... computer settings in the GPO for a password policy i want to implement. ... there are two different policies for passwords. ... policies ONLY in the Default Domain Policy, ...
    (microsoft.public.windows.server.sbs)