+ Post New Thread
Results 1 to 11 of 11
Windows 7 Thread, Password Complexity for different OU's in Technical; I need some help setting up password complexity for different OU's, does anyone do this and can pass on any ...
  1. #1
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    1,225
    Thank Post
    47
    Thanked 157 Times in 138 Posts
    Rep Power
    47

    Password Complexity for different OU's

    I need some help setting up password complexity for different OU's, does anyone do this and can pass on any knowledge of how its done?

    EDIT: We have all Win 7 pro client and a mix of Server 2012 & 2008 dc's.

    Cheers

  2. #2

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,572 Times in 1,252 Posts
    Rep Power
    340
    So long as you have a 2008 DC with the domain/forest functional levels also at 2008, you can set passwords per OU.

    Computer Config > Windows Settings > Security Settings > Account Policies > Password Policy

    Change this to your requirements per OU.

  3. Thanks to Michael from:

    fairm010 (20th January 2014)

  4. #3
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    1,225
    Thank Post
    47
    Thanked 157 Times in 138 Posts
    Rep Power
    47
    Awesome! I didn't realise it would be this simple! Cheers Michael.

  5. #4

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,725
    Thank Post
    667
    Thanked 1,638 Times in 1,463 Posts
    Rep Power
    424
    Didn't think it worked even if you set that at OU level.

    We do it with fine grained password policies:

    Creating Fine Grained Password Policies - Brandon LawsonBrandon Lawson - My Life as a IT Professional

    Ben

  6. #5
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    1,225
    Thank Post
    47
    Thanked 157 Times in 138 Posts
    Rep Power
    47
    That looks a bit more complicated. Hmmm..

  7. #6
    ADMaster's Avatar
    Join Date
    May 2012
    Posts
    332
    Thank Post
    5
    Thanked 35 Times in 30 Posts
    Rep Power
    23
    I second @plexer I don't think setting a password policy anywhere but the default domain policy has any effect. You'll need to setup a fine grained password policy.

    Once it is setup, it's not difficult to manage. I don't assign it to an OU but a security group. Add all the younger years to a group and assign a weak password policy, all the staff probably have a group already, assign a stronger password to them.

    Thanks,

  8. #7
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    1,225
    Thank Post
    47
    Thanked 157 Times in 138 Posts
    Rep Power
    47
    I'll do that, thanks!

  9. #8

    Join Date
    Jun 2012
    Location
    UK
    Posts
    25
    Thank Post
    0
    Thanked 6 Times in 5 Posts
    Rep Power
    6
    As stated above that setting doesn't work, That setting will only effect local account polices on servers and workstations.

    Fine grained password policies are the only way to do what you require but as stated works on security group not ou.
    Using adsi edit to do it is fairly simple but could be dangerous if you change the wrong thing. It is even easier using the admin tools in windows 8, 8.1, 2012 and 2012 r2. If you aren't licensed for any of these just download a trial version, once up and running use the Active Directory Admin Centre to create the password policy

    Creating fine grained password policies through GUI Windows server 2012

  10. Thanks to Mustang from:

    TheScarfedOne (1st August 2014)

  11. #9
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    1,225
    Thank Post
    47
    Thanked 157 Times in 138 Posts
    Rep Power
    47
    Cheers Mustang. As I said, I have 2 2012 DC's so shouldn't be a problem.

    Cheers everyone, i'll sort this out tomorrow and post my results!

    matt

  12. #10

    Join Date
    Jan 2009
    Location
    Northants
    Posts
    143
    Thank Post
    5
    Thanked 11 Times in 10 Posts
    Rep Power
    13
    Quote Originally Posted by fairm010 View Post
    Cheers Mustang. As I said, I have 2 2012 DC's so shouldn't be a problem.

    Cheers everyone, i'll sort this out tomorrow and post my results!

    matt
    How did you get on with this? is on my job list for next week

  13. #11
    TheScarfedOne's Avatar
    Join Date
    Apr 2007
    Location
    Plymouth, Devon
    Posts
    1,347
    Thank Post
    677
    Thanked 169 Times in 154 Posts
    Blog Entries
    78
    Rep Power
    85
    Quote Originally Posted by Mustang View Post
    As stated above that setting doesn't work, That setting will only effect local account polices on servers and workstations.

    Fine grained password policies are the only way to do what you require but as stated works on security group not ou.
    Using adsi edit to do it is fairly simple but could be dangerous if you change the wrong thing. It is even easier using the admin tools in windows 8, 8.1, 2012 and 2012 r2. If you aren't licensed for any of these just download a trial version, once up and running use the Active Directory Admin Centre to create the password policy

    Creating fine grained password policies through GUI Windows server 2012
    This was the post that Ive used to do it recently. Much easier than the old 2008 FGPP was.

SHARE:
+ Post New Thread

Similar Threads

  1. Password complexity for primary school
    By 3rdknight in forum Windows
    Replies: 22
    Last Post: 5th November 2013, 12:15 PM
  2. Password Complexity for Staff Only
    By _techie_ in forum How do you do....it?
    Replies: 4
    Last Post: 20th August 2012, 01:43 PM
  3. Replies: 4
    Last Post: 17th July 2012, 09:24 AM
  4. Replies: 9
    Last Post: 28th November 2008, 02:04 PM
  5. Shared favourites for different classes
    By contink in forum How do you do....it?
    Replies: 7
    Last Post: 1st October 2006, 01:32 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •