Password Policy in AD

[Guest]

Hi,
We have a Windows 2000 Domain. We'd like to enforce some password security
policy, such as password age, length. But we don't want to apply to everyone
in the domain. We want to select a group and apply the policy to it. So only
members of that group is required to follow the password rules.

Is it possible? Please advise.

 

[Danny Sanders]

Password policies are one to a domain. If your domain has information in it
worth protecting with "strong" passwords, setting up a group with less than
"strong" passwords is equal to creating a security hole.

Why try to brute force a "strong" password when there are "weak" passwords
on the same domain?


This is one reason to create a second domain.


hth
DDS W 2k MVP MCSE

 

[Mark Renoden [MSFT]]

Hi all

I've posted this a few times. Excellent reference for this stuff is

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/bpactlck.mspx

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[JB]

Use this.

http://www.altusnet.com/passfilt/

Hi all

I've posted this a few times. Excellent reference for this stuff is

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/bpactlck.mspx

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

Password policies are one to a domain. If your domain has information in
it
worth protecting with "strong" passwords, setting up a group with less
than
"strong" passwords is equal to creating a security hole.

Why try to brute force a "strong" password when there are "weak" passwords
on the same domain?


This is one reason to create a second domain.


hth
DDS W 2k MVP MCSE