Password policy in mixed domain

[Jobos]

We've got our first 2008r2 DC box running alongside 2 other 2003 DC's and now I would like to change the password policy for the staff OU. Is this possible in this situation or do all the DCs need to be 2008?

 

Thanks

[phillipmillward]

Hi you need to raise the domain functional level to at least 2008 which will make your 2003 DCs non functional, in fact if you try to raise the level it wont let you because of the 2003 DCs.

 

So unfortunately you would have to make sure that all your DCs are 2008.

 

To implement fine grained password policies are really fiddly but there is a nice tool that you can get which will make the process a lot easier.

[Jobos]

Thanks, I thought as much. That would have made it too easy!