Password Policy in AD

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi,
We have a Windows 2000 Domain. We'd like to enforce some password security
policy, such as password age, length. But we don't want to apply to everyone
in the domain. We want to select a group and apply the policy to it. So only
members of that group is required to follow the password rules.

Is it possible? Please advise.
 
Password policies are one to a domain. If your domain has information in it
worth protecting with "strong" passwords, setting up a group with less than
"strong" passwords is equal to creating a security hole.

Why try to brute force a "strong" password when there are "weak" passwords
on the same domain?


This is one reason to create a second domain.


hth
DDS W 2k MVP MCSE
 
Use this.

http://www.altusnet.com/passfilt/






Mark Renoden said:
Hi all

I've posted this a few times. Excellent reference for this stuff is

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/bpactlck.mspx

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

Danny Sanders said:
Password policies are one to a domain. If your domain has information in
it
worth protecting with "strong" passwords, setting up a group with less
than
"strong" passwords is equal to creating a security hole.

Why try to brute force a "strong" password when there are "weak" passwords
on the same domain?


This is one reason to create a second domain.


hth
DDS W 2k MVP MCSE
Click to expand...
Click to expand...
 
Back
Top