+ Post New Thread
Results 1 to 8 of 8
How do you do....it? Thread, Complex Password Policy in Technical; Is it possible to define a separate policy for staff and students? Currently I have a complex policy configured on ...
  1. #1
    Mr_Jiminy's Avatar
    Join Date
    Nov 2011
    Location
    Newcastle Upon Tyne
    Posts
    210
    Thank Post
    21
    Thanked 7 Times in 6 Posts
    Rep Power
    7

    Complex Password Policy

    Is it possible to define a separate policy for staff and students?

    Currently I have a complex policy configured on the default domain policy.

    It has been brought up recently that the lower level students are struggling to log in due to remembering the complex passwords. Thoughts are to revert pupils to a 4-5digit number password, thus removing the complexity.

    I have tried defining a separate policy for staff and students, however the top level domain policy seems to override.

    Can anyone clarify if it is possible and how the top level/ lower level gp's should be configured?

    Thanks

  2. #2

    Join Date
    Jul 2012
    Location
    Boerne Texas USA
    Posts
    45
    Thank Post
    0
    Thanked 9 Times in 9 Posts
    Rep Power
    6
    Password Policy
    Windows server 2008 R2 added a feature called "fine-grained password policy" which is what i think you are looking for. It does not look straight forward to implement and I have not personally tried to implement.
    Good luck.

  3. #3
    Mr_Jiminy's Avatar
    Join Date
    Nov 2011
    Location
    Newcastle Upon Tyne
    Posts
    210
    Thank Post
    21
    Thanked 7 Times in 6 Posts
    Rep Power
    7
    Thanks for that, actually a colleague of my mine found the same info this afternoon.

  4. #4

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,211 Times in 761 Posts
    Rep Power
    394
    This will help enormously with the config: Specops Password Policy Basic

    Free, though you have to fork over your email address. Specops aren't cowboys though, I get occasional marketing from them but that's it.
    Last edited by AngryTechnician; 9th December 2013 at 06:43 PM.

  5. #5

    Join Date
    Mar 2009
    Location
    Cambridge
    Posts
    32
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I second the Specops recommendation. The full version is very expensive, even for us, but the free version is pretty sufficient for all I've wanted to do. Brilliant piece of software for interfacing with the otherwise formidable AD DS FGPP.

  6. #6

    Join Date
    Jul 2010
    Posts
    106
    Thank Post
    0
    Thanked 14 Times in 14 Posts
    Rep Power
    11
    The reason why your new polices don't apply is because you were only allowed one password policy until 2008 R2, if you did configure these settings they would only effect local account polices on workstation/servers

    If you have 2012 Domain controllers you can create the password polices from the Active Directory Admin Center so no need for the Specops tool. (probably works with windows 8 rsat tools but i haven't tried it)

  7. #7

    Join Date
    Apr 2012
    Posts
    413
    Thank Post
    39
    Thanked 35 Times in 28 Posts
    Rep Power
    15
    Quote Originally Posted by AngryTechnician View Post
    This will help enormously with the config: Specops Password Policy Basic

    Free, though you have to fork over your email address. Specops aren't cowboys though, I get occasional marketing from them but that's it.
    WHS, helps with the fine grained password setup, wasn't that hard.

  8. #8

    Join Date
    Feb 2007
    Posts
    196
    Thank Post
    6
    Thanked 8 Times in 8 Posts
    Rep Power
    17
    I did mine in adsi edit. Relatively straight forward. It works on group membership. So staff have their own and students have the default password policy for the domain.. I have a rely good article for it if you want it.

SHARE:
+ Post New Thread

Similar Threads

  1. Password Policy - 2003
    By timbo343 in forum Windows
    Replies: 10
    Last Post: 15th October 2008, 08:51 AM
  2. Password policy for remote users
    By cookie_monster in forum Windows
    Replies: 4
    Last Post: 18th May 2008, 03:46 PM
  3. The answer to multiple password policies
    By binky in forum Windows
    Replies: 2
    Last Post: 6th July 2007, 12:08 PM
  4. Setting up the Password Policy on domain.
    By tosca925 in forum Windows
    Replies: 5
    Last Post: 13th June 2007, 08:28 PM
  5. Setting password policy at OU level.
    By tosca925 in forum Windows
    Replies: 9
    Last Post: 5th June 2007, 05:36 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •