+ Post New Thread
Results 1 to 9 of 9
Windows 7 Thread, Password Complexity for different OU's in Technical; I need some help setting up password complexity for different OU's, does anyone do this and can pass on any ...
  1. #1
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    1,133
    Thank Post
    47
    Thanked 145 Times in 127 Posts
    Rep Power
    45

    Password Complexity for different OU's

    I need some help setting up password complexity for different OU's, does anyone do this and can pass on any knowledge of how its done?

    EDIT: We have all Win 7 pro client and a mix of Server 2012 & 2008 dc's.

    Cheers

  2. #2

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    So long as you have a 2008 DC with the domain/forest functional levels also at 2008, you can set passwords per OU.

    Computer Config > Windows Settings > Security Settings > Account Policies > Password Policy

    Change this to your requirements per OU.

  3. Thanks to Michael from:

    fairm010 (20th January 2014)

  4. #3
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    1,133
    Thank Post
    47
    Thanked 145 Times in 127 Posts
    Rep Power
    45
    Awesome! I didn't realise it would be this simple! Cheers Michael.

  5. #4

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,325
    Thank Post
    622
    Thanked 1,577 Times in 1,414 Posts
    Rep Power
    413
    Didn't think it worked even if you set that at OU level.

    We do it with fine grained password policies:

    Creating Fine Grained Password Policies - Brandon LawsonBrandon Lawson - My Life as a IT Professional

    Ben

  6. #5
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    1,133
    Thank Post
    47
    Thanked 145 Times in 127 Posts
    Rep Power
    45
    That looks a bit more complicated. Hmmm..

  7. #6
    ADMaster's Avatar
    Join Date
    May 2012
    Posts
    324
    Thank Post
    5
    Thanked 33 Times in 28 Posts
    Rep Power
    23
    I second @plexer I don't think setting a password policy anywhere but the default domain policy has any effect. You'll need to setup a fine grained password policy.

    Once it is setup, it's not difficult to manage. I don't assign it to an OU but a security group. Add all the younger years to a group and assign a weak password policy, all the staff probably have a group already, assign a stronger password to them.

    Thanks,

  8. #7
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    1,133
    Thank Post
    47
    Thanked 145 Times in 127 Posts
    Rep Power
    45
    I'll do that, thanks!

  9. #8

    Join Date
    Jun 2012
    Location
    UK
    Posts
    22
    Thank Post
    0
    Thanked 5 Times in 4 Posts
    Rep Power
    5
    As stated above that setting doesn't work, That setting will only effect local account polices on servers and workstations.

    Fine grained password policies are the only way to do what you require but as stated works on security group not ou.
    Using adsi edit to do it is fairly simple but could be dangerous if you change the wrong thing. It is even easier using the admin tools in windows 8, 8.1, 2012 and 2012 r2. If you aren't licensed for any of these just download a trial version, once up and running use the Active Directory Admin Centre to create the password policy

    Creating fine grained password policies through GUI Windows server 2012

  10. #9
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    1,133
    Thank Post
    47
    Thanked 145 Times in 127 Posts
    Rep Power
    45
    Cheers Mustang. As I said, I have 2 2012 DC's so shouldn't be a problem.

    Cheers everyone, i'll sort this out tomorrow and post my results!

    matt

SHARE:
+ Post New Thread

Similar Threads

  1. Password complexity for primary school
    By 3rdknight in forum Windows
    Replies: 22
    Last Post: 5th November 2013, 12:15 PM
  2. Password Complexity for Staff Only
    By _techie_ in forum How do you do....it?
    Replies: 4
    Last Post: 20th August 2012, 01:43 PM
  3. Replies: 4
    Last Post: 17th July 2012, 09:24 AM
  4. Replies: 9
    Last Post: 28th November 2008, 02:04 PM
  5. Shared favourites for different classes
    By contink in forum How do you do....it?
    Replies: 7
    Last Post: 1st October 2006, 01:32 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •