Password Policy

G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

I have been trying to set up the Password Policy for a few days now, but I
just can’t get it to work. I’ll just explain to you what I’m doing and maybe
you can give me some pointers.

When I right click on our Domain in AD Users and Computers, Click Properties
and then select the Group Policy tab, I only have Default Domain Policy in
there.

First of all, should I be able to change settings in this Policy, like when
I edit it, go into Computer Configuration, Windows Setting, Security
Settings. Should I find the Account Policies – Password Policy in there or is
the Default Domain Policy not for these types of things. I can also not
expand the Administrative Templates. I am thinking that b/c this is a Default
Policy, I am not able to change it. Or could it be that I do not have the
permissions to change it.

Secondly, in the Group Policy tab, I click New and create a new Policy
called Password Policy. I edit it and go to Computer Configuration, Windows
Settings, Security Settings, Account Policies and in Password Policy I change
all the Setting to what I want. When I go to a test user created in the Users
OU, I set the Account to change Password at next logon. However, when I log
in as this User, I can change the Password to 123 or anything else. I also
try and change the Password for a user I created in a OU I created manually
but still no Policy enforcement.

This whole thing is driving me crazy. If anyone could just help me and tell
me where to set this Password Policy, and in what way.

Any help would be much Appreciated.

Thanks
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

Hi,

Thank you for posting.

Yes you should be able to change the Password Policies in the following
Group Policy navigation tree:

Computer Configuration\Windows Settings\Security Settings\Account
Policies\Password Policy

The following configurations can be set:

Enforce Password History
Maximum Password Age
Minimum Password Age
Minimum Password Length
Passwords must meet complexity requirements
Store password using reversible encryption
User must log on to change the password

The Password Policies should be applied at the domain level and applies to
all users in the domain. The password policy cannot be applied at the OU
level.

Please set the configurations appropriately and refresh the policy settings.

The policy should apply. Please let us know the policy settings that you
are trying to set if the policy does not apply.

Hope it helps.

Thank you,
Rashmi

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Password Policy
| thread-index: AcTbfHSRZ07yxWp/QeeW7AHM0qidtQ==
| X-WBNR-Posting-Host: 168.210.128.210
| From: "=?Utf-8?B?TWl0dG9uRQ==?=" <eugenem@transcircuit.com(Do not Spam)>
| Subject: Password Policy
| Date: Mon, 6 Dec 2004 02:15:05 -0800
| Lines: 33
| Message-ID: <28DDC155-73F7-42EF-98CD-07C61150CF1E@microsoft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 8bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.win2000.active_directory
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
| Path: cpmsftngxa10.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: cpmsftngxa10.phx.gbl microsoft.public.win2000.active_directory:94933
| X-Tomcat-NG: microsoft.public.win2000.active_directory
|
| I have been trying to set up the Password Policy for a few days now, but
I
| just can’t get it to work. I’ll just explain to you what I’m doing
and maybe
| you can give me some pointers.
|
| When I right click on our Domain in AD Users and Computers, Click
Properties
| and then select the Group Policy tab, I only have Default Domain Policy
in
| there.
|
| First of all, should I be able to change settings in this Policy, like
when
| I edit it, go into Computer Configuration, Windows Setting, Security
| Settings. Should I find the Account Policies – Password Policy in there
or is
| the Default Domain Policy not for these types of things. I can also not
| expand the Administrative Templates. I am thinking that b/c this is a
Default
| Policy, I am not able to change it. Or could it be that I do not have the
| permissions to change it.
|
| Secondly, in the Group Policy tab, I click New and create a new Policy
| called Password Policy. I edit it and go to Computer Configuration,
Windows
| Settings, Security Settings, Account Policies and in Password Policy I
change
| all the Setting to what I want. When I go to a test user created in the
Users
| OU, I set the Account to change Password at next logon. However, when I
log
| in as this User, I can change the Password to 123 or anything else. I
also
| try and change the Password for a user I created in a OU I created
manually
| but still no Policy enforcement.
|
| This whole thing is driving me crazy. If anyone could just help me and
tell
| me where to set this Password Policy, and in what way.
|
| Any help would be much Appreciated.
|
| Thanks
|
|
|