AD passwords and GAPS

[kcalderw]

Currently our passwords require 8 characters. For our lower grades, I'd like to set it to 4 characters. I've set up fine grain password settings within AD, however I cannot seem to find the complexity settings. I'd like to set passwords with stricter complexity for the upper grades (letters, numbers, characters). I know I can set these options via GPO but can I set them per OU?

 

Also, I need to then do a massive password reset for entire OUs. What's the best option to do that with? I saw I can do this via groups but how can I join users in a group in bulk? Currently all users just sit in an OU.

 

I need this to then sync with GAPS (Google Apps Password Sync).

[howartp]

From memory you can't stipulate combination of upper/lower/numeric/punctuation - you just state complexity is on or off, per policy.

[matt40k]

Unless you get a paid for add on like http://www.specopssoft.com/product/specops-password-policy/

 

You can set (create) gpo at the ou level

 

Don't actually reset the logins, set them to change password on first logon

 

Adding users to group I tend to open group, search for users by ou or such then you should be able to select them all

[GeeDee86]

Hi all,

 

There is another way of doing it... I've previously found that the Group Policy password policies don't work that well.

 

I have previously set up shadow groups for OUs in Active Directory, and then change some settings in AD to enforce the password policies...

 

However - I can't find a reference for the document I used before...

 

 

G

[kcalderw]

I believe you're referring to fine grained passwords which I've set up. I have now moved all our users into their respective groups. I just need to find an easy way to reset passwords one OU at a time.