Setting password policy at OU level.

[tosca925]

Can I or is it possible to set up a password policy on OU level. We have a our default password policy set up at domain level but i want to add a second one at OU level. We want to change certain restrictions on a group of users in a OU. We want to tie these users down a little more.

I would like to force a 8 digit/letter password.
To expire every 30 days
Possible to force a muxture of letters and numbers
To stop the same password being used for a lengthy time.


Can this and how would this be set up?

[SteveBentley]

I have to say that your policy sounds like a recipe for passwords on post-it notes under the keyboard, but it should be possible to apply a GPO to an OU and override the domain policy if you set the loopback.

[marco84]

Im sure someone else will be able to confirm this, but im pretty sure password policies are only applicable at domain level.

[Nij.UK]

Password policies are only at domain level, you cannot set them at OU Level.

If you wanted to do this, you would have to create a child domain and apply your password policy at that child's domain policy

(if that makes sense)

[plexer]

As has been said you can only have one password policy in a domain the topic has cropped up several times before.

Ben

[tosca925]

Yep, just read about it.

Back to the drawing board.

[Geoff]

You can fudge it so you have multiple password policies to be fair. I'm assuming you want a seperate policy for staff/kids yes?

[tosca925]

Yes,

Geoff i'm all hears on the fudge-ing it bit..........!

[Norphy]

Not cheap by any stretch of the imagination but does what you want

Specops Password Policy

[tosca925]

Cost is an issue here i'm afraid. :-(