Password Policy on W2K3 Server

[Guest]

I want to force my users to change their passwords every 90 days. This is
quite simple to do in the Domain Security Policy. However, I want to
restrict my users so that they cannot change their password to the same thing
with a number. For instance, if they have a password or "password", when
they are prompted to change, I don't want them changing it to "password1".
How can I accomplish this? Thank you for your help.

 

[Norbert Fehlauer [MVP]]

Joe R. wrote:
Hi Joe,

I want to force my users to change their passwords every 90 days.
This is quite simple to do in the Domain Security Policy. However, I
want to restrict my users so that they cannot change their password
to the same thing with a number. For instance, if they have a
password or "password", when they are prompted to change, I don't
want them changing it to "password1". How can I accomplish this?

This is not possible with Windows Built ins.
You have to use 3rd party software like Passfilt Pro from Altusnet
http://www.altusnet.com/products/pfp/index.asp
There is one more from anixis
http://www.anixis.com/products/ppe/download.htm and afair Desktopstandard
has one tool too.

HTH
Norbert

 

[Harj]

Hi,

There is another third party tool out there that allows you multiple
password policies within a single domain called Specops Password Policy
Some of the settings you can set per policy is password age, how many
lower case, upper case, digits, special characters the user must
require in the password.
You can also link a wordlist that you create where you can place
anything you do not wish the end users to use within their password. (
digits can also be used)
And all of this is done through group policy with no agents, or schema
extensions.

You can find more information at the following link
http://www.specopssoft.com/products/specopspasswordpolicy/Default.asp

Harj Singh
"Password Policy Done Right"
www.specopssoft.com

 

[Guest]

Thank you both for your replies.