Domain password policy

[robjduk]

Morning,

Hope someone can either help me or tell me it cant be done...

 

I have a problem where I want people using my SharePoint server (parents) to have a lower password complexity than standard domain users. Now we have a default domain policy which dictates this however after a morning of testing various solutions, I have come to the conclusion that no matter what policy applies to the user's desktop computer, it is the policy on the domain controller which dictates the final password policy.

To test this, my default domain policy says passwords must be at least 8 characters long however I made a new group policy to a test desktop claiming passwords must be at least 14 characters long. After a few GP refreshes I tried to change the password and it still allowed me to use 8 character long passwords, even though the desktop the request came from said it has to be at least 14. I enabled loopback replace policy but still no joy.

 

Are you stuck to one password policy per domain or am I missing a setting somewhere. My SLG team are looking for a more relaxed approach to passwords as parents are experiencing issues however I am more in favour of a bit more security for my users.

 

Hope I explained that correctly!

All help appreciated. Thank you.

Edited June 9, 2015 by robjduk

[FN-GM]

This is your friend!

 

Step-by-Step: Enabling and Using Fine-Grained Password Policies in AD - Canadian IT Professionals - Site Home - TechNet Blogs

[robjduk]

This is your friend!

 

Step-by-Step: Enabling and Using Fine-Grained Password Policies in AD - Canadian IT Professionals - Site Home - TechNet Blogs

 

You sir, are amazing!