Force Strong Passwords for a single Group

From: Russ (rwsinclair@mcpmail.com)
Date: 04/10/03


From: "Russ" <rwsinclair@mcpmail.com>
Date: Thu, 10 Apr 2003 06:17:45 -0700


Account policies are applied to the domain, because it is
the domain controller that gets the policy and has to
decide "does this logon meet my requirements?" And the
answer is yes or no, not maybe.
 
There are, as you appear to be aware, 3rd party products
which claim to be able to alter that behavior. I haven't
tried any of them. Plan B is a separate domain for the
remote users.

The other answer, from Alex, suggests that local policy
would work. I know that you can set things like non-
expiring passwords locally and have it supercede domain
policy, but I'm not sure about complexity. Give it a try.

>-----Original Message-----
>Hi, would anyone know a way of enforcing strong passwords
for a single WIN2K
>security group without the use of 3rd party software? I
would like to
>enforce the use of strong passwords only for users with
remote access
>rights.
>
>Thanks,
>Bilbo.
>
>
>.
>



Relevant Pages

  • Re: Locking down database accounts
    ... Personally it sounds to me that your company has established a policy and is ... But bottom line if you have to use SQL Server logins and passwords, ... Whether it's an encrypted flat file or an encrypted XML file, ...
    (microsoft.public.sqlserver.security)
  • RE: policy-based password cracker
    ... that required at least one upper, one lower and one number in all passwords. ... password checks can be eliminated due to the policy. ... Since the vast majority of the time for a brute-force attack is ... most brute-force attacks are very fast. ...
    (Pen-Test)
  • Re: Security hierarchy
    ... OK - last night I managed to reset the password policy. ... I had to boot into DS restore mode in order to be able to access the ... New users had to have complex passwords. ... >> I have tried all the suggestions plus a new top GPO at domain level ...
    (microsoft.public.win2000.security)
  • Re: GPO Password length not working
    ... For "domain users" password account policy is set only at the domain level. ... Usually this is Default Domain Policy but it can be any Group Policy linked ... You can use the command net accounts on a domain controller to see the ... > passwords or anything goes pretty much. ...
    (microsoft.public.windows.server.security)
  • Re: Sharing folder permission ????
    ... XP blocks network access to accounts that have blank ... you can do so through Local Security Policy. ... Limit local account use of blank passwords to ... When I click my Xp system visible in default>>woprkgroup, I get a login windows whcih identify me on> the ...
    (microsoft.public.windowsxp.security_admin)