Impact of changing group policy



I currently have a group policy that is setup that the passwords have to be 8
characters (but no special characters), rotate every 45 days, and the last
five passwords are remembered. I have one W2k and one Win2003 DC, and will
be changing the policy to the following:

7 Character Minimum
90 day rotation
Remember the last 3 passwords
Need Capital letters, lower case, numbers, and alphanumeric characters
Not contain any part of the username

My question is this: If I have users who have just changed their passwords
and I make a change to the current password GPO, will they be forced to
change their passwords immediately or will they remain under the old password
policy standards until the 45 day limit has run out?

.



Relevant Pages

  • Re: Locking down database accounts
    ... Personally it sounds to me that your company has established a policy and is ... But bottom line if you have to use SQL Server logins and passwords, ... Whether it's an encrypted flat file or an encrypted XML file, ...
    (microsoft.public.sqlserver.security)
  • RE: policy-based password cracker
    ... that required at least one upper, one lower and one number in all passwords. ... password checks can be eliminated due to the policy. ... Since the vast majority of the time for a brute-force attack is ... most brute-force attacks are very fast. ...
    (Pen-Test)
  • Re: Security hierarchy
    ... OK - last night I managed to reset the password policy. ... I had to boot into DS restore mode in order to be able to access the ... New users had to have complex passwords. ... >> I have tried all the suggestions plus a new top GPO at domain level ...
    (microsoft.public.win2000.security)
  • Re: GPO Password length not working
    ... For "domain users" password account policy is set only at the domain level. ... Usually this is Default Domain Policy but it can be any Group Policy linked ... You can use the command net accounts on a domain controller to see the ... > passwords or anything goes pretty much. ...
    (microsoft.public.windows.server.security)
  • Re: Sharing folder permission ????
    ... XP blocks network access to accounts that have blank ... you can do so through Local Security Policy. ... Limit local account use of blank passwords to ... When I click my Xp system visible in default>>woprkgroup, I get a login windows whcih identify me on> the ...
    (microsoft.public.windowsxp.security_admin)