+ Post New Thread
Results 1 to 8 of 8
Windows Server 2008 R2 Thread, Group Policy Password Complexity Question in Technical; Looking to change our password policy to force students and staff alike to have 8 characters in their username. Thought ...
  1. #1
    Sam_Brown's Avatar
    Join Date
    Sep 2009
    Location
    Northampton
    Posts
    567
    Thank Post
    95
    Thanked 37 Times in 35 Posts
    Rep Power
    18

    Group Policy Password Complexity Question

    Looking to change our password policy to force students and staff alike to have 8 characters in their username. Thought I'd test it out on a test OU but creating a GPO and assigning it to the test OU doesn't seem to enforce it. I can set other settings and they apply but not the password policy.

    Are there special considerations when using GPO to set password complexity on OUs?

    Also I see that it's a computer policy... if I say wanted to force students to have one set of rules and staff another then I assume that I would need to enable loop back processing and assign it to a USER OU?

    Cheers,

  2. #2

    fiza's Avatar
    Join Date
    Dec 2008
    Location
    London
    Posts
    2,121
    Thank Post
    413
    Thanked 313 Times in 264 Posts
    Rep Power
    152
    I haven't done this myself but I was under the impression you had to set the policy to a security group not an OU.

  3. #3

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    5,665
    Thank Post
    850
    Thanked 893 Times in 738 Posts
    Blog Entries
    9
    Rep Power
    328
    AFAIK this policy can only be set in the Default Domain Policy.

  4. Thanks to tmcd35 from:

    Sam_Brown (14th May 2014)

  5. #4
    rob_coles's Avatar
    Join Date
    Mar 2007
    Location
    Hull
    Posts
    104
    Thank Post
    15
    Thanked 13 Times in 9 Posts
    Rep Power
    18

  6. #5
    Norphy's Avatar
    Join Date
    Jan 2006
    Location
    Harpenden
    Posts
    2,309
    Thank Post
    54
    Thanked 290 Times in 227 Posts
    Blog Entries
    6
    Rep Power
    116
    Assuming that your domain is running at Windows 2008 level or above, you can set fine grained password policies.

    You set them on groups rather than OUs and it's not especially simple to do

    AD DS: Fine-Grained Password Policies

  7. Thanks to Norphy from:

    Sam_Brown (14th May 2014)

  8. #6
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    1,170
    Thank Post
    47
    Thanked 151 Times in 132 Posts
    Rep Power
    46
    I use fine grained password policies assigned to security groups on Windows Server 2012 domain.

  9. #7

    Join Date
    Apr 2010
    Posts
    2,038
    Thank Post
    83
    Thanked 187 Times in 154 Posts
    Rep Power
    83
    As above.

    I have fine grained passwords setup at all my schools. Works much better than the standard password rules but is more complex to setup.

  10. #8
    Sam_Brown's Avatar
    Join Date
    Sep 2009
    Location
    Northampton
    Posts
    567
    Thank Post
    95
    Thanked 37 Times in 35 Posts
    Rep Power
    18
    Thought I'd give it a bash and no issues until it came to finish off creating the Password Object. I'm getting an error something along the lines of:

    Operation failed. error code: 0x20e7
    The modification was not permitted for security reasons.
    000020E7Tongue TiedvcErr: DSID-03050681,problem 5003
    (WILL_NOT_PERFORM),data 0


    I've tried the usual of looking through MS and Google but can't find an easy fix. Has anyone who has used Fine Grained Password has this error before at all?

SHARE:
+ Post New Thread

Similar Threads

  1. Exchange 2010 password complexity question
    By robjduk in forum Enterprise Software
    Replies: 3
    Last Post: 13th September 2013, 08:29 PM
  2. [MS Office - 2007] Office 2007 Group Policy Question
    By Stuart_C in forum Office Software
    Replies: 2
    Last Post: 15th April 2008, 04:16 PM
  3. Office 2007 Group Policy question.
    By Stuart_C in forum Windows
    Replies: 0
    Last Post: 28th January 2008, 04:43 PM
  4. Question about Group Policy software deployment
    By sidewinder in forum Windows
    Replies: 9
    Last Post: 5th December 2007, 04:35 PM
  5. group policy questions
    By hipsdontlie in forum Windows
    Replies: 5
    Last Post: 6th November 2007, 12:37 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •