+ Post New Thread
Results 1 to 9 of 9
Windows 7 Thread, Password Complexity for different OU's in Technical; I need some help setting up password complexity for different OU's, does anyone do this and can pass on any ...
  1. #1
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    811
    Thank Post
    37
    Thanked 73 Times in 62 Posts
    Rep Power
    31

    Password Complexity for different OU's

    I need some help setting up password complexity for different OU's, does anyone do this and can pass on any knowledge of how its done?

    EDIT: We have all Win 7 pro client and a mix of Server 2012 & 2008 dc's.

    Cheers

  2. #2

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    8,941
    Thank Post
    232
    Thanked 1,510 Times in 1,206 Posts
    Rep Power
    328
    So long as you have a 2008 DC with the domain/forest functional levels also at 2008, you can set passwords per OU.

    Computer Config > Windows Settings > Security Settings > Account Policies > Password Policy

    Change this to your requirements per OU.

  3. Thanks to Michael from:

    fairm010 (20th January 2014)

  4. #3
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    811
    Thank Post
    37
    Thanked 73 Times in 62 Posts
    Rep Power
    31
    Awesome! I didn't realise it would be this simple! Cheers Michael.

  5. #4

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    12,963
    Thank Post
    586
    Thanked 1,494 Times in 1,340 Posts
    Rep Power
    397
    Didn't think it worked even if you set that at OU level.

    We do it with fine grained password policies:

    Creating Fine Grained Password Policies - Brandon LawsonBrandon Lawson - My Life as a IT Professional

    Ben

  6. #5
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    811
    Thank Post
    37
    Thanked 73 Times in 62 Posts
    Rep Power
    31
    That looks a bit more complicated. Hmmm..

  7. #6
    ADMaster's Avatar
    Join Date
    May 2012
    Posts
    264
    Thank Post
    4
    Thanked 26 Times in 22 Posts
    Rep Power
    12
    I second @plexer I don't think setting a password policy anywhere but the default domain policy has any effect. You'll need to setup a fine grained password policy.

    Once it is setup, it's not difficult to manage. I don't assign it to an OU but a security group. Add all the younger years to a group and assign a weak password policy, all the staff probably have a group already, assign a stronger password to them.

    Thanks,

  8. #7
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    811
    Thank Post
    37
    Thanked 73 Times in 62 Posts
    Rep Power
    31
    I'll do that, thanks!

  9. #8

    Join Date
    Jun 2012
    Location
    UK
    Posts
    12
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    As stated above that setting doesn't work, That setting will only effect local account polices on servers and workstations.

    Fine grained password policies are the only way to do what you require but as stated works on security group not ou.
    Using adsi edit to do it is fairly simple but could be dangerous if you change the wrong thing. It is even easier using the admin tools in windows 8, 8.1, 2012 and 2012 r2. If you aren't licensed for any of these just download a trial version, once up and running use the Active Directory Admin Centre to create the password policy

    Creating fine grained password policies through GUI Windows server 2012

  10. #9
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    811
    Thank Post
    37
    Thanked 73 Times in 62 Posts
    Rep Power
    31
    Cheers Mustang. As I said, I have 2 2012 DC's so shouldn't be a problem.

    Cheers everyone, i'll sort this out tomorrow and post my results!

    matt

SHARE:
+ Post New Thread

Similar Threads

  1. Password complexity for primary school
    By 3rdknight in forum Windows
    Replies: 22
    Last Post: 5th November 2013, 12:15 PM
  2. Password Complexity for Staff Only
    By _techie_ in forum How do you do....it?
    Replies: 4
    Last Post: 20th August 2012, 01:43 PM
  3. Replies: 4
    Last Post: 17th July 2012, 09:24 AM
  4. Replies: 9
    Last Post: 28th November 2008, 02:04 PM
  5. Shared favourites for different classes
    By contink in forum How do you do....it?
    Replies: 7
    Last Post: 1st October 2006, 01:32 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •