Re: Password Policy



Hello,

Yes, I am aware that, if you specify a password that doesn't meet
password policy you will be told so in the form of some exception/error
code.

However, if AD is enforcing policies and AD knows what a valid password
criteria is, its fair to expect an API to validate a given a password
against the policy and generate the one which AD policy likes.

Looks like there is no way to acheive this using an API.

Thanks.
-Prasad

.



Relevant Pages

  • Re: PasswordFilter and ASP.NET
    ... Joe Kaplan wrote:> Hmm, I'm pretty sure that the password filter mechanism doesn't allow you to> check password history, but I may be wrong about that. ... > A lot of the password policy you can actually read by querying the DC. ... If they are using the default password policy, you can>>>actually read the password policy from the domain in question and "know">>>how to validate passwords against that. ... I see that the PasswordFilter API in the platform SDK does>>>>this, but we need to call this API from ASP.NET. ...
    (microsoft.public.platformsdk.security)
  • Re: [PATCH] 0/2 Buddy allocator with placement policy (Version 9) + prezeroing (Version 4)
    ... I am working on preparing a patch proposal for a policy ... I have not read up on cpuset before so I am assuming you are talking about ... >> Would it make sense to specify these buddy allocator fallback policies ... NUMA binding API deals with memory ranges, ...
    (Linux-Kernel)
  • Re: secedit API
    ... I believe the api you are after has never been made public. ... In general there is no programmatic interface for setting any of ... the policy values in group policy (rare exceptions exist, ... > to write a reporting tool which uses the sdb database and the analyze ...
    (microsoft.public.security)
  • Re: Programmatically retrieving group policy settings?
    ... I know the existence of resultant set of policy and its tool. ... I wonder whether that mmc snap-in is supported for win2k server. ... API, which looks very nice and useful. ...
    (microsoft.public.win2000.general)
  • Re: Restricted Groups????
    ... We have used this policy to pretty good effect. ... Administrator Group, will get removed (for instance..if you don't specify ... Admins group was not specified, and so the Domain Admins was removed from all ...
    (microsoft.public.windows.server.active_directory)