Re: Password Policy by OU

One password policy per domain.

Password policies set at the OU level will only take affect when logging on
locally.

The thinking is if your domain holds info sensitive enough for "strong"
passwords, setting one set up users to use "weak" password amounts to
Windows allowing you to create a security hole.

hth
DDS W 2k MVP MCSE

"Doug Fox" <dfox138-no-spam@xxxxxxxxxxx> wrote in message
news:uhnoLVsQGHA.1416@xxxxxxxxxxxxxxxxxxxxxxx
Is it possible that we deploy password policy by OU? Let say, the HR
users' passwords are 8 characters in length, They must be changed every
30 days. The Manufacturing users' passwords are 6 characters in length and
must be changed every 42 days. I then setup 2 OUs. One for HR and one for
MFG and apply a GPO for each OU.

Any comments/suggestions are appreciated.

Thanks,

DF





.

Relevant Pages

  • Re: Password Policy Change
    ... change my password policy to require 10 characters instead of 8, ... with 8 passwords have any issues logging in? ... applied next time their password expires or next time they change it. ...
    (microsoft.public.windows.server.active_directory)
  • Re: domain controller
    ... It would have to be at the Domain level as the Password Policy is a domain ... Password Policies set at the OU level (I normally do not mention ... not affect domain user account objects! ...
    (microsoft.public.win2000.active_directory)