Password Policy

  • Thread starter Thread starter Eric Darby
  • Start date Start date
E

Eric Darby

We currently have a default domain policy for users passwords. We would
like to enforce a stricter password policy for our IT staff (using stringent
passwords, etc.)

If I block policy inheritance on an IT OU and enable a GPO for the new
password policy will this work or will it only affect local computer
passwords?
 
It seems that password policy, while available to set on OU's GPO, only
works on the Domain's GPO. So, to do this you would have to create another
domain, and move your users into it. Lame, no?

-Stephen
 
No that will not work. Domain policy is the ONLY place to configure domain
user accounts no matter what type of work around you try. --- Steve
 
Steve,

Not too sure what you mean by what I suggested won't work. I did not suggest
to configure anything related to the Account Policy? I only suggested to
configure the user properties to force a new password, which would occur at
next logon. This would then kick in the Domain Account Policy that
configures the DCs.
 
Hi Derek.

There seems to be some confusion to postings with same subject line. I was replying
to Eric, who wanted to know if block inheritance would prevent domain password policy
from applying to domain users in an OU in the domain. Your suggestion is great. I
think it would make sense for her to encourage users to change their passwords ahead
of any policy change and force some to also. She does not want everyone to have to do
it at the same time - at least I would not want to be there having to take calls.
Sorry for the confusion and keep up the good work. --- Steve
 
Steve, my apologies! I was looking at the wrong posting!
It must be getting late, or I am just too tired:-).
 
Back
Top