Different Password Policies for Teachers and Students - Group Policy

[J_Worth]

Hello everyone,

We are currently in the process of deploying RemoteApp in school to allow staff to access SIMS.net etc from home. However, we would like to set complex password policies on staff user accounts only so that it does not affect student accounts.

I have heard that you can only have one password policy on a domain network.

My question is, how can we setup a password policy for staff without it affecting our student accounts?

Thanks in advance!

J. Worth.

[Duke5A]

It's not the most elegant solution, but at least it is an option now in 2008. I haven't had a chance to implement this yet though, so I can't say how well it works.

Fine Grained Password Policies-PSO

[Blue_Cookeh]

Haha, I had this problem a few days ago when I was looking to make staff have more complex passwords, what with using Bitlocker etc and it actually prompted me to get rid of our last 2003R2 DC. Your domain needs to be at Windows Server 2008 functional level for what Duke5A said above.

[cscott]

We've been using fine grained password policies for about 2 years now to allow us to apply different policies to staff, students and sensitive accounts (i.e. DBA's, network admins etc...) - works great. Only downside is the lack of a friendly GUI for managing them, have to use adsiedit to create/change the policies.

[AngryTechnician]

I use the free Specops Password Policy Basic to manage our fine grained password policies. You get added to their mailing list and every so often they'll try to sell you their more advanced tools, but it's well worth it.