+ Post New Thread
Results 1 to 8 of 8
Wireless Networks Thread, CC3 Expiring passwords in Technical; Anyone know of problems with changing one of the Domain policy GPOs to make passwords expire/have complexity rules etc with ...
  1. #1
    CheeseDog's Avatar
    Join Date
    Jan 2006
    Location
    West Midlands
    Posts
    217
    Thank Post
    5
    Thanked 2 Times in 2 Posts
    Rep Power
    18

    CC3 Expiring passwords

    Anyone know of problems with changing one of the Domain policy GPOs to make passwords expire/have complexity rules etc with CC3?

    Not sure it's relevant but it's 2000 server I have.

  2. #2
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,002
    Thank Post
    120
    Thanked 282 Times in 260 Posts
    Rep Power
    108

    Re: CC3 Expiring passwords

    On a normal setup policies like complexity are per domain and I would think they would be the same under CC3.

  3. #3
    CheeseDog's Avatar
    Join Date
    Jan 2006
    Location
    West Midlands
    Posts
    217
    Thank Post
    5
    Thanked 2 Times in 2 Posts
    Rep Power
    18

    Re: CC3 Expiring passwords

    Yep

    I'm reasonably confident it won't screw anything up but with CC3 I'm always wary of making changes. Most of the problems seem to arise when you make a change and then apply an update.

    Whilst I'm thinking about is there a setting to make sure the password isn't too similar to the old one?

  4. #4
    meastaugh1's Avatar
    Join Date
    Jul 2006
    Location
    London/Hertfordshire
    Posts
    890
    Thank Post
    69
    Thanked 85 Times in 70 Posts
    Rep Power
    32

    Re: CC3 Expiring passwords

    As Chris says, it should be fine.

    You can set a password history in Windows so that it doesn't allow the user to use the same password again for x number of changes, but not sure about similar passwords.

    Just take common sense precautions such as ensuring any service accounts are set to not expire, such as the RM server backup password.

    I know RM are flogging their password plus software which enables multiple password policies, but I didn't opt for that due to their other add-ons seeming particularly unreliable/buggy (LST, Auditor etc).

    We use Specops Password Policy here which work well and integrates nicely into MMC for administration.

  5. #5

    webman's Avatar
    Join Date
    Nov 2005
    Location
    North East England
    Posts
    8,406
    Thank Post
    639
    Thanked 961 Times in 661 Posts
    Blog Entries
    2
    Rep Power
    324

    Re: CC3 Expiring passwords

    We haven't set this policy, but RM does support this capability - users are prompted to change the password immediately after logging in if it has expired, and this uses their own dialog (part of their GINA replacement I think).

  6. #6

    Join Date
    Jan 2006
    Location
    Surburbia
    Posts
    2,178
    Thank Post
    74
    Thanked 307 Times in 243 Posts
    Rep Power
    115

    Re: CC3 Expiring passwords

    CC3 is mostly just a pre-configured Windows domain and you can set account policy the very same way you do in normal Windows e.g. in the Default Domain Policy.

    Off-hand the only policy thing I think you should avoid is GPMC, coz RM have AD and Sysvol permission mismatches that you definitely shouldn't let GPMC correct.

  7. #7

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    9,932
    Thank Post
    1,339
    Thanked 1,781 Times in 1,105 Posts
    Blog Entries
    19
    Rep Power
    594

    Re: CC3 Expiring passwords

    CC3 also contains some schema extensions ... I don't think these are in the public domain either so using GPMC can cause problems. As with Classlink, Ranger and CSE you should use the tools provided ...

    LNM does *not* make changes to the schema ... but there are still a number of things that need adding in my experience.

  8. #8
    CheeseDog's Avatar
    Join Date
    Jan 2006
    Location
    West Midlands
    Posts
    217
    Thank Post
    5
    Thanked 2 Times in 2 Posts
    Rep Power
    18

    Re: CC3 Expiring passwords

    Ok I'm probably going to give this a go sometime next week.

    Just to confirm what someone said earlier if you do check the "user must change password at next login" it does indeed work.

    The only problems you get then are users not understanding the prompt but I'll leave that for a FFS thread.

SHARE:
+ Post New Thread

Similar Threads

  1. Expiring Ink Cartridges.
    By Geoff in forum Hardware
    Replies: 6
    Last Post: 14th December 2006, 06:34 PM
  2. Passwords
    By ictex in forum Wireless Networks
    Replies: 19
    Last Post: 25th May 2006, 10:57 AM
  3. Passwords
    By indie in forum Wireless Networks
    Replies: 15
    Last Post: 25th January 2006, 10:04 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •