Proficient in FGPP of Windows Server 2008 Multi-meta password policy

Objective

In the last few articles I have introduced how to create, manage password Set object PSO through ADSIEdit tools, Active Directory Users and Computer snap-in, ldifde command-line tools, Quest PowerShell. In this article, I will show you how to use a foreigner developed tool FGPP to implement and manage the multiple password strategy. I believe that after reading this article, we will love this direct and simple tool.

By convention, in order for everyone to have a clear idea in the operation, I will write out the main steps:

Step 1: Create a PSO

Step 2: Apply PSO to User and/or global security groups

Step 3: Manage the PSO

Step 4: View the results of a user or global security group PSO

Step 5: Verify the results

Note: Because of versatility and repeatability, some steps are not necessarily demonstrated, please refer to the previous article.

Actual combat

Ⅳ fgpp (fine-grained Password Policy Tools)

Step 1: Create a PSO

1. Download and install the FGPP software first from the following site:

32-bit:

HTTP://WWW.TRUESEC.COM/FILES/FGPP%20BETA%202_2256-20080120.1%20 (x86). zip

64-bit:

HTTP://WWW.TRUESEC.COM/FILES/FGPP%20BETA%202_2256-20080120.1%20 (x64). zip

2. When installed, open the MMC management console and add the FGPP snap-in. As shown in Figure 1.

1.jpg (48.27 KB)

2008-7-18 18:48

Figure 1

3. Open the fine-grained Password Policy tools tool and right-click "New Policy" to create a new PSO. As shown in Figure 2.

2.jpg (28.73 KB)

2008-7-18 18:48

Figure 2

4. In the next window, you can do the setup all together, at a glance, really convenient! As shown in Figure 3.

3.jpg (31.23 KB)

2008-7-18 18:48

Figure 3

Step 2: Apply PSO to User and/or global security groups

Right-click to select the Adminpso property you created, switch to the Policy applies to tab, and tap the Add/remove button to apply the PSO (or not) to the target user and group. As shown in Figure 4.

4.jpg (24.23 KB)

2008-7-18 18:48

Figure 4

Step 3: Manage the PSO

Right-click to select the Adminpso property you created and switch to the Policy properties tab, where you can make all the changes to the PSO.

Step 4: View the results of a user or global security group PSO

1.

Right-click on the fine-grained Password Policies and select "Resultant Policy Wizard" as shown in Figure 5.

5.jpg (28.18 KB)

2008-7-18 18:48

Figure 5

2.

Click the "Add" button in the "Effective Password Policy" interface to add the user you want to view. I enter the John user. Returns the result immediately. You can see from Figure 6 that the password policy that John has in effect is ADMINPSO.

6.jpg (23.11 KB)

2008-7-18 18:48

Figure 6

3.

Note: This method cannot be used for global security groups to view the password policy in effect.

Step 5: Verify the results

Please refer to the previous article for a brief.

Conclusion

In this article, I showed you how to manage multiple password policies with a powerful, easy-to-use tool FGPP. I am here to introduce a tool that can greatly reduce our burden, especially for beginners. itself this tool should be used without any technical content. At this point, the series is also finished. You should be more aware of the multiple password policies for Windows 2008. If there are any mistakes or omissions, please correct me.