Windows Server R2 Granular Password Policy

Requirements:

Domain functional Level windowsserver 2008 or more

Steps to deploy granular password policy:

1. First create Password Policy object (Adsiedit.msc-load domain partition-System-password Settings container-Right-click New Object

2. Set the specific password policy:

First "value" = OU policy Name

Second value password Set priority: When a user belongs to multiple departments at the same time, the lower the value, the higher the corresponding priority "= 10

Whether the third "value" password can be restored = FALSE

Fourth "value" records the length of the password history "=3

Fifth "value" whether complexity is enabled "=true

Sixth "value" Minimum password Length "=6

Seventh "value" password minimum use time =30:00:00:00←30 days 0 hours 0 minutes 0 seconds

Eighth "value" password maximum =50:00:00:00←50 days 0 hours 0 minutes 0 seconds

Nineth "Value" the number of times the password is locked "=5

Tenth "value" Lockout time =00:00:20:00← lockout account 20 minutes

The 11th "value" Reset counter = 00:00:30:00

3. Bind the appropriate PSO to the corresponding user or global group:

First, add users to the global group

Second, right-click the new object in the second step, find "Msds-psoappliesto", edit, add Windows account, put the group in.

This article is from "hello~ Billy" blog, please make sure to keep this source http://babylater.blog.51cto.com/4928321/1609824

Windows Server R2 Granular Password Policy