RE: strong passwords for certain groups



Would a OU also do the job?


"=?Utf-8?B?aHVmZi1uLXB1ZmY=?=" <huffnpuff@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote in news:31A3A056-BAEF-4FC5-9212-3B9DD5C91FCD@xxxxxxxxxxxxx:

> Hi
>
> No. Password policy can only be set at the domain level. So if you
> want multiple policies you need multiple domains.
>
> Sorry
>
> M
>
> "Draughtsman" wrote:
>
>> Hi,
>>
>> I'm deploying OWA and RWW, so I want Remote Users to use strong
>> passwords. But I also got logins and users who I don't want to burden
>> with this, because the will never use RWW.
>> Can I restrict a strong password policy only to the
>> RemoteAccessUsers?
>>
>>
>> Thanks,
>> Draughtsman
>>

.



Relevant Pages

  • Re: To those who designed Group Policy in Active Directory
    ... > policy(applied at domain level) and the strict password policy (applied to ... > the OU) were applying to that computer account. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Where to set the domain password policy up?
    ... Account Policies applied to Domain Controllers apply to all accounts stored on domain controllers - that is, to all domain accounts in that domain! ... I'd say apply at the domain level still - to have consistent policy for domain accounts in the domain as well as for local accounts on all computers in that domain. ... > Is it better to set a domain password policy up at the domain node level ...
    (microsoft.public.windows.server.active_directory)
  • Re: Changing Time Issue / Password Question
    ... You can't set password policy at the OU level, it can only be set at the domain level and will impact all accounts in the domain. ... Reset the main Domain GPO password policy not to be complex did a gpupdate /force and then I was able to have a lower case password in a seperate OU. ... I uncheck the box to automatically adjust clock for daylight savings time because on Saturday night I do not want to the clock to change. ... So I created a GPO and set it not to inherit and did a gpupdate /force but it still makes me create a complex password with upper and lower case for this one user account? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain - enforce password policy
    ... Maximum password age 45 ... Only on domain level with the highest precedence all users will get the Password Policy. ... The way you linked the policy with Password settings -- to an OU - the local machine accounts will get the password policy (if computer accounts are in the OU, since those are Computer Configuration settings). ...
    (microsoft.public.windows.group_policy)
  • Re: Password policy clairification?
    ... settings serveral different times to the domain level and it's never worked. ... I've created a GPO called Password Policy at the ... :) Now for my points of confusion. ... 'user must change password at next login' switch must be done once before ...
    (microsoft.public.windows.server.active_directory)