Mundy

There can only be one Group Policy which defines password and lockout policies in Server 2008, however the new "fine grained password and lockout policy" feature allows you to allows you to configure an additional policy that applies to one or more users or groups and will override the domain password and lockout policy.

This can't be modified with Active Directory Users and Computers or the Group Policy Management Console - instead you must use low level tools such as ADSI Edit.

WindowsSecurity.com: Configuring Granular Password Settings in Windows Server 2008

A much easier option, however, is to download the free utility "Password Policy Basic" by Specops.

TrackBack URI for this entry

Comments (0)

Subscribe to this comment's feed

Name

Email

Website

Title

Comment

smaller | bigger

Subscribe via email (registered users only)

I have read and agree to the Terms of Usage.

Add Comment