Password policy enabled for specific groups

Discussion in 'Active Directory' started by jas0n, Jun 13, 2007.

  1. jas0n

    jas0n Guest

    Windows 2003 domain - We dont currently have the password policy enabled and
    we are looking to start bringing it in. Initially for the domain admin users
    and specific groups of users and then later on domain wide.

    Do I create a policy at the top level, define length, age, complexity, etc
    and then use security filtering within group policy management console to
    only apply it to the groups we specify - I understand we can't have multiple
    different policies within the same domain - this isnt an issue - I just need
    it to apply the policy to specific targetted groups rather than everyone,
    initally at least.
     
    jas0n, Jun 13, 2007
    #1
    1. Advertisements

  2. jas0n

    Myweb Guest

    Hello jas0n,

    Without any 3rd party tool you can NOT apply multiple password policies in
    your domain. Will be possible with Server 2008 but not in 2003. You have
    to set policy on domain level.

    Best regards

    Myweb
    Disclaimer: This posting is provided "AS IS" with no warranties, and confers
    no rights.
     
    Myweb, Jun 13, 2007
    #2
    1. Advertisements

  3. jas0n

    jas0n Guest

    Yes, I understand this as already stated in my original post - I wanted to
    know if I can use active directory groups to selectively apply the single
    password policy to those groups and not the whole domain.

    Its a 2003 domain with a few 2000 dc's still yet to be upgraded.
     
    jas0n, Jun 13, 2007
    #3
  4. jas0n

    Myweb Guest

    Hello jas0n,

    No you can't. The policy works for the complete domain. Not possible to do
    what you like.

    Best regards

    Myweb
    Disclaimer: This posting is provided "AS IS" with no warranties, and confers
    no rights.
     
    Myweb, Jun 14, 2007
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.