Password Policy not enforced Computer Configuration\Windows Settings\Security Setting

[beancole]

I have set this policy (minimum password length) and its not enforcing?

 

I get the RSOP data for the correct user and its applied but not enforcing it? I read somewhere that it must be applied to the Domain and not an OU (don't know if this is reliable)

 

The issue is I want to apply some complexity rules etc to staff only were a special needs school and staff need to have secure passwords but students couldn't get on with uppercase lowercase symbols etc.

 

Does anyone kmnow how to get this to work or alternatively have another method that will make staff complex but students simple.

 

cheers

[3s-gtech]

Two options:

Active Directory Fine Grained Passwords with ADSI Edit - The Sysadmins

 

Or upgrade your DCs to 2012/R2 to use the newer features:

Server 2012 - Active Directory Fine Grained Passwords Revisited - The Sysadmins

[beancole]

cheers for the reply, Neither will be possible at the moment. I would love to be all 2012 lol. Currently I am stuck with a 2003 as a domain controller which I will be downgrading very soon so I'll be able to raise my domain level function to 2008.

 

My current solution will just be a simple minimum of 3 letter passwords not ideal but it will have to do for the time.

Edited March 17, 2015 by bencole

[gmonks]

I had this problem. Turned out to be the Local Security Policy causing the issue. Disabled the password policy in there and it started enforcing again.

[beancole]

Think I will just keep it with a 3 letter minimum password. this s OK for our kids and means staff at least hvae to have some form of password. Roll on decommissioning server 2003 lol. then its all a direct upgrade from 2008r2 to 2012.