Password settings

[Duane Lambe]

Hi all... small office, Win2k workstations, no domain, need to set
password policies on individual boxes.

The things I was looking for are:

-password lockout after 6 attempts
-last 100 passwords can't be used again
-rotate passwords every 60 days
-character length minimum of 8
-require one lowercase, one uppercase, and one numeric character

Not sure if all these settings are even possible under Win2k, but if
someone knows the settings I'm looking for, or knows a good resource
online that might have these settings, please let me know.

'Preciate it in advance.

 

[Patrick L. Reilly]

In administrative tools launch the security policy management console
plugin.
Alternatively, open a Run dialog and type in:
%SystemRoot%\system32\secpol.msc /s

Cheers,
Patrick

 

[Patrick L. Reilly]

In administrative tools launch the security policy management console
plugin.
Alternatively, open a Run dialog and type in:
%SystemRoot%\system32\secpol.msc /s

Cheers,
Patrick

 

[Duane Lambe]

In administrative tools launch the security policy management console
plugin.
Alternatively, open a Run dialog and type in:
%SystemRoot%\system32\secpol.msc /s

Awesome Patrick, thanks very much!

Here's a question, though... can I export a GP setting file of some sort,
and import it on a per machine basis? I can just as easily change the
policies while I'm sitting there, but it'd be nicer to simply apply a
file, human error and all.

 

[Duane Lambe]

In administrative tools launch the security policy management console
plugin.
Alternatively, open a Run dialog and type in:
%SystemRoot%\system32\secpol.msc /s

Awesome Patrick, thanks very much!

Here's a question, though... can I export a GP setting file of some sort,
and import it on a per machine basis? I can just as easily change the
policies while I'm sitting there, but it'd be nicer to simply apply a
file, human error and all.

 

[Duane Lambe]

In administrative tools launch the security policy management console
plugin.
Alternatively, open a Run dialog and type in:
%SystemRoot%\system32\secpol.msc /s

Also, all the settings I need are in the Local Password Policy area, but
they're all grey - any idea how to make them... not grey?

 

[Duane Lambe]

In administrative tools launch the security policy management console
plugin.
Alternatively, open a Run dialog and type in:
%SystemRoot%\system32\secpol.msc /s

Also, all the settings I need are in the Local Password Policy area, but
they're all grey - any idea how to make them... not grey?

 

[Duane Lambe]

Also, all the settings I need are in the Local Password Policy area, but
they're all grey - any idea how to make them... not grey?

Hmm, I seem to be answering my own questions here, to an extent.

They're being modded via GP, which must be because I logged onto our
domain controller at one point in the past. I no longer do, and am using
just a regular workgroup login.... but the settings are still greyed out.
Any ideas? Anyone?

 

[Duane Lambe]

Also, all the settings I need are in the Local Password Policy area, but
they're all grey - any idea how to make them... not grey?

Hmm, I seem to be answering my own questions here, to an extent.

They're being modded via GP, which must be because I logged onto our
domain controller at one point in the past. I no longer do, and am using
just a regular workgroup login.... but the settings are still greyed out.
Any ideas? Anyone?

 

[Patrick L. Reilly]

Have you logged in as Administrator?

Also, if you are trying to set up a domain policy suggest you look at
http://www.microsoft.com/technet/tr...r2003/proddocs/deployguide/dmebb_gpu_oylk.asp
to describe how to roll out settings to many machines within the domain.

Patrick

 

[Patrick L. Reilly]

Have you logged in as Administrator?

Also, if you are trying to set up a domain policy suggest you look at
http://www.microsoft.com/technet/tr...r2003/proddocs/deployguide/dmebb_gpu_oylk.asp
to describe how to roll out settings to many machines within the domain.

Patrick