Re: 2003 AD security policy question

From: Miha Pihler [MVP] (mihap-news_at_atlantis.si)
Date: 04/27/05 

Date: Wed, 27 Apr 2005 09:39:29 +0200

Hi,

Unfortunately there can only be one account (password) policy in domain. If
you need stronger passwords for one group of users, you would have to move
these users to e.g. child domain and assign stronger password requirements
on this child domain.

If you really think about it, it wouldn't make much sense to have very
secure password and not so secure passwords in same domain. It would be like
house that has half of the windows with bulletproof glass installed and
other half of the windows with ordinary glass. Those bulletproof windows
wouldn't contribute much to security of the house... 

-- 
Mike
Microsoft MVP - Windows Security
"Curious George's Twin" <shaggy@whoamitoday.net> wrote in message 
news:i6Gbe.1310$Hf6.711@fe11.lga...
> Dear Colleagues:
>
> With Windows NT networks (and I believe 2000 as well), I was unable to set 
> up a stronger password policy for certain groups.
>
> My desired result is to put a stronger password policy on one group, but a 
> weaker one on another.  Specifically, password complexity rules.
>
> Is this possible with Windows 2003 active directory enabled networks and 
> those that have 2000 servers in the mix?
>
> Thanks,
>
> CC
>

Relevant Pages

  • Re: 2003 AD security policy question
    ... > requirements on this child domain. ... > and other half of the windows with ordinary glass. ... >> set up a stronger password policy for certain groups. ...
    (microsoft.public.windows.server.security)
  • Re: 2003 AD networks security question
    ... other half of the windows with ordinary glass. ... > up a stronger password policy for certain groups. ...
    (microsoft.public.security)
  • How to get rid of requirement for logon screen
    ... I clicked an option on my Bitdefender antivirus for setting a ... "stronger password" for Windows and now when I boot up a password ... Not finding anything in the Windows Help. ...
    (microsoft.public.windowsxp.general)
  • Re: 2003 AD networks security question
    ... Or, as posted in response to other thread, use smart cards for some, ... Microsoft MVP (Windows Security) ... > up a stronger password policy for certain groups. ...
    (microsoft.public.security)