Minimum password length

James

Distinguished
Dec 31, 2007
1,388
0
19,280
Archived from groups: microsoft.public.win2000.group_policy (More info?)

I just inherited a Windows 2000 domain with no domain
policies setup, including no password policies. I want to
setup a minimum password length(and other password
policies). We have many generic users that use the same
login with basically no network rights but to their
specific applications they use. Their passwords are
anywhere from 4-6 characters. If I apply a minimum
password length of 7 on the domain and set each account up
to not have the password expire, will the group policy
override that and force them to change it? Can the
generic accounts keep their small passwords with the
policy in place??

What will happen to other users that have the small
passwords? Will it prompt them to change or just when the
password expires.

Thanks
James
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.group_policy (More info?)

If you have a user with short password and "No expire" you will be able use
the old password without any problem. No prompt to change it will appear.

Of course you will not be able to create a new account (or change password
for an old one) with short password.

Best regards!
Igor Fomin
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.group_policy (More info?)

James-

Minimum Password Length policies are not retroactive. They only apply to new
passwords.

If a users password is marked to not expire, then they will never be
prompted for a new password due to expiry (regardless of domain settings).

--
--
Brian Desmond
Windows Server MVP
desmondb@payton.cps.k12.il.us

Http://www.briandesmond.com


"James" <anonymous@discussions.microsoft.com> wrote in message
news:1ed301c42745$d74b75d0$a301280a@phx.gbl...
> I just inherited a Windows 2000 domain with no domain
> policies setup, including no password policies. I want to
> setup a minimum password length(and other password
> policies). We have many generic users that use the same
> login with basically no network rights but to their
> specific applications they use. Their passwords are
> anywhere from 4-6 characters. If I apply a minimum
> password length of 7 on the domain and set each account up
> to not have the password expire, will the group policy
> override that and force them to change it? Can the
> generic accounts keep their small passwords with the
> policy in place??
>
> What will happen to other users that have the small
> passwords? Will it prompt them to change or just when the
> password expires.
>
> Thanks
> James