+ Post New Thread
Results 1 to 8 of 8
Windows Server 2008 R2 Thread, Group Policy Password Complexity Question in Technical; Looking to change our password policy to force students and staff alike to have 8 characters in their username. Thought ...
  1. #1
    Sam_Brown's Avatar
    Join Date
    Sep 2009
    Location
    Northampton
    Posts
    594
    Thank Post
    100
    Thanked 42 Times in 40 Posts
    Rep Power
    19

    Group Policy Password Complexity Question

    Looking to change our password policy to force students and staff alike to have 8 characters in their username. Thought I'd test it out on a test OU but creating a GPO and assigning it to the test OU doesn't seem to enforce it. I can set other settings and they apply but not the password policy.

    Are there special considerations when using GPO to set password complexity on OUs?

    Also I see that it's a computer policy... if I say wanted to force students to have one set of rules and staff another then I assume that I would need to enable loop back processing and assign it to a USER OU?

    Cheers,

  2. #2

    fiza's Avatar
    Join Date
    Dec 2008
    Location
    London
    Posts
    2,229
    Thank Post
    447
    Thanked 319 Times in 270 Posts
    Rep Power
    153
    I haven't done this myself but I was under the impression you had to set the policy to a security group not an OU.

  3. #3

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    5,878
    Thank Post
    879
    Thanked 959 Times in 790 Posts
    Blog Entries
    9
    Rep Power
    339
    AFAIK this policy can only be set in the Default Domain Policy.

  4. Thanks to tmcd35 from:

    Sam_Brown (14th May 2014)

  5. #4
    rob_coles's Avatar
    Join Date
    Mar 2007
    Location
    Hull
    Posts
    114
    Thank Post
    16
    Thanked 16 Times in 12 Posts
    Rep Power
    18

  6. #5

    Norphy's Avatar
    Join Date
    Jan 2006
    Location
    Harpenden
    Posts
    2,494
    Thank Post
    57
    Thanked 346 Times in 267 Posts
    Blog Entries
    6
    Rep Power
    127
    Assuming that your domain is running at Windows 2008 level or above, you can set fine grained password policies.

    You set them on groups rather than OUs and it's not especially simple to do

    AD DS: Fine-Grained Password Policies

  7. Thanks to Norphy from:

    Sam_Brown (14th May 2014)

  8. #6
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    1,308
    Thank Post
    53
    Thanked 171 Times in 151 Posts
    Rep Power
    49
    I use fine grained password policies assigned to security groups on Windows Server 2012 domain.

  9. #7

    Join Date
    Apr 2010
    Posts
    2,104
    Thank Post
    95
    Thanked 189 Times in 156 Posts
    Rep Power
    84
    As above.

    I have fine grained passwords setup at all my schools. Works much better than the standard password rules but is more complex to setup.

  10. #8
    Sam_Brown's Avatar
    Join Date
    Sep 2009
    Location
    Northampton
    Posts
    594
    Thank Post
    100
    Thanked 42 Times in 40 Posts
    Rep Power
    19
    Thought I'd give it a bash and no issues until it came to finish off creating the Password Object. I'm getting an error something along the lines of:

    Operation failed. error code: 0x20e7
    The modification was not permitted for security reasons.
    000020E7Tongue TiedvcErr: DSID-03050681,problem 5003
    (WILL_NOT_PERFORM),data 0


    I've tried the usual of looking through MS and Google but can't find an easy fix. Has anyone who has used Fine Grained Password has this error before at all?

SHARE:
+ Post New Thread

Similar Threads

  1. Exchange 2010 password complexity question
    By robjduk in forum Enterprise Software
    Replies: 3
    Last Post: 13th September 2013, 08:29 PM
  2. [MS Office - 2007] Office 2007 Group Policy Question
    By Stuart_C in forum Office Software
    Replies: 2
    Last Post: 15th April 2008, 04:16 PM
  3. Office 2007 Group Policy question.
    By Stuart_C in forum Windows
    Replies: 0
    Last Post: 28th January 2008, 04:43 PM
  4. Question about Group Policy software deployment
    By sidewinder in forum Windows
    Replies: 9
    Last Post: 5th December 2007, 04:35 PM
  5. group policy questions
    By hipsdontlie in forum Windows
    Replies: 5
    Last Post: 6th November 2007, 12:37 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •