No announcement yet.

Enforcing a password policy

  • Filter
  • Time
  • Show
Clear All
new posts

  • Enforcing a password policy

    I need to enforce passords on my win2000 domain. How do I force my users to change their passwords at the next login? Is there a GPO setting for this?

    I don't think I should have to enable this individually for each user, do I?

  • #2
    Re: Enforcing a password policy

    Hi lincoln.

    Yes, there is a group policy setting for this.

    Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy

    For more info:

    Network Consultant/Engineer
    Baltimore - Washington area and beyond


    • #3
      Re: Enforcing a password policy

      I saw this setting and it did not work. I need to enforce the password change for existing users, this setting only applies to creating new ones.

      None of my users use passwords at all. So I want them to be forced to setup a password when the log in the next time.


      • #4
        Re: Enforcing a password policy

        Password policies can be pushed to Active Directory domain members via GPO for automation, but one rule you should keep in mind is that password policies are only defined and enforced by the Default Domain Policy GPO, or a GPO that you apply to the domain.

        My point here is that although you will find password policy settings that you can apply to GPOs and link to OUs or sites, they will be ignored. Password policies are only effective when defined in GPOs that are applied at the domain level.

        It is for this reason that when you are planning Active Directory design for an entity that requires different/separate password policies, multiple domains will need to be implemented. For certification candidates, this concept is straight off the 70-219 and 70-297 exams.
        Last edited by jasonboche; 10th June 2006, 04:24.
        VCDX3 #34, VCDX4, VCDX5, VCAP4-DCA #14, VCAP4-DCD #35, VCAP5-DCD, VCPx4, vEXPERTx4, MCSEx3, MCSAx2, MCP, CCAx2, A+ - VMware Virtualization Evangelist
        My advice has no warranties. Follow at your own risk.