Re: finally implementing password policy questions??

"Bri" <Bri@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2759C288-81BD-4B86-A277-676DD2AEB007@xxxxxxxxxxxxxxxx
Is this process documented somewhere? Do you know of a link?


Yes, I am sure it is documented somewhere. It is so fundemental that
I have not sought it out since maybe 1998 or 1999. Have you tried the
Windows server reskit? perhaps discussions in the deployment guide?

www.reskit.com



"Roger Abell [MVP]" wrote:

"Bri" <Bri@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:D16DFC0A-FFCE-4816-8B4C-7C36D6B12C7B@xxxxxxxxxxxxxxxx
Thanks again Roger... Ok I lied and have another question. Is there
anyway
around having to edit the "default domain policy" to get this to work?


One may set this in any GPO linked to the domain, provided that
no higher-priority domain-linked GPO also sets Account policies
with different values (in which case it would be effective).



"Roger Abell [MVP]" wrote:

Aging and complexity are two separate requirements.
That checkbox only exempts from password change being forced.
That an existing password does not meet new complexity requirements
is never checked. Complexity is enforced when a new password is
being defined, and only then.

"Bri" <Bri@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2AD0998F-9AA4-4A90-900B-8373E7721767@xxxxxxxxxxxxxxxx
Roger.. thanks for the info! Just 1 more follow up. Even though that
check
box setting over-rides the aging will it make future passwords on my
system
account require complexity?

Brian
"Roger Abell [MVP]" wrote:

"Bri" <Bri@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:33B1FE7D-F15B-42BF-A1B0-3E2421027F93@xxxxxxxxxxxxxxxx
Hoping someone can answer a few questions?? We are finally
implimenting
a
complex password policy.

My question is what happens right after it is activated?

We have 2500 users. Will they all get prompted right away if
their
current
password does not meet some or all of the standards i set?


The new complexity requirements are only applied when they
change their passwords next; the aging settings take effect right
away based on when their passwords were last changed.

For my system accounts if I leave the box checked that states
"password
never expires" will they be protected from the new policy?

That setting "overrides" password aging settings (much as it
would seem by its naming).











.

Relevant Pages

  • Re: finally implementing password policy questions??
    ... That an existing password does not meet new complexity requirements ... box setting over-rides the aging will it make future passwords on my ... complex password policy. ... the aging settings take effect right ...
    (microsoft.public.windows.group_policy)
  • Re: finally implementing password policy questions??
    ... That an existing password does not meet new complexity requirements ... box setting over-rides the aging will it make future passwords on my ... complex password policy. ... the aging settings take effect right ...
    (microsoft.public.windows.group_policy)
  • Re: Reasons and examples for security
    ... Roger Abell ... >> "Use passphrases" (with some details tbd relative to retraints ... >> on length minimum and relationship with complexity policy). ...
    (microsoft.public.security)
  • RE: Problem after setting password complexity
    ... change password after you enable "password must meet complexity ... I suggest you configure the password policy under "domain security ... Password must meet complexity requirements Enabled ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: MU team brews its own, cheaper gas
    ... If you're a decision-maker suffering from these acute symptoms it may be time to ask your doctor about Complexity Science: a nascent, interdisciplinary field exploring the structure, behavior and dynamics of complex systems. ... Catalyst's "Forum on Complexity and Transportation Policy," to be held June 15th at the Cosmos Club in Washington, DC is the second of a four-part series exploring the new public policy insights offered by complexity science. ... Catalyst is pleased to feature two of the most highly esteemed individuals in the field of transportation policy today: Dr. Tom Downs and Dr. Carl Simon. ...
    (sci.fractals)