Archived from groups: microsoft.public.win2000.group_policy (More info?)
Hi,
I have one Dc and in that I have two OUs called production and Software.
My plan is I want to implement Password policy ( min 8 lenth characters and
complexity ) for only Software OU.And i don't want to do it on Production OU.
Archived from groups: microsoft.public.win2000.group_policy (More info?)
Hello Srikrishna,
"There can be only a single password policy for each account database. An
Active Directory domain is considered a single account database, as is the
local account database on stand-alone computers. Computers that are members
of a domain also have a local account database, but most organizations that
have deployed Active Directory domains require their users to log on to their
computers and the network by using domain-based accounts. Consequently, if
you specify a minimum password length of 14 characters for a domain, all
users in the domain must use passwords of 14 or more characters when they
create new passwords. To establish different requirements for a specific set
of users, you must create a new domain for their accounts."
That is an excerpt of Step-by-Step Guide to Enforcing Strong Password
Policies from Microsoft.
Archived from groups: microsoft.public.win2000.group_policy (More info?)
One password policy per domain.
The reason behind this is if the domain has sensitive enough information in
it to require a strong password policy, setting some users to a weaker
standard amounts to a security hole.
The requirement to have differing password policies is a major determining
factor for creating a second domain.
hth
DDS W 2k MVP MCSE
"Srikrishna" <Srikrishna@discussions.microsoft.com> wrote in message
news:5B9C9272-9587-467A-B17C-44079808D2DE@microsoft.com...
> Hi,
> I have one Dc and in that I have two OUs called production and Software.
> My plan is I want to implement Password policy ( min 8 lenth characters
> and
> complexity ) for only Software OU.And i don't want to do it on Production
> OU.
>
> So is there any plan to implement this ..........
>
>
You are about to answer a thread that has been inactive for more than 6 months. If you still wish to proceed, please ensure that your posting is original and does not duplicate or overlap any prior responses to this thread.