Windows Server

Bjarne Hansen · Guest

Hi Group

I'm testing some stuff on a Windows 2003 server
running AD.

Im wondering if it's possible to make different password
policies on differnet OU's in the domain

Examble
OU1 = "Password must meet complexity..." disable
OU2 = "Password must meet complexity..." enable

so users in OU1 can use easy password's
an users in OU2 must use complex password

Thank in advance

B.Hansen

Miha Pihler [MVP] · Guest

Hi,

There can only be one account (and therefore password) policy in domain and
this policy can only be set on domain level. If you require different
password policy for different users, you will need to setup two domains
(e.g. root and child domain).

You can actually change account settings on OU policy, but this policy will
not have any effect on domain accounts in this OU. It will only have effect
on local user account on computers that might be in this OU.

Account policies
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/AccountPoliciestopnode.asp

--
Mike
Microsoft MVP - Windows Security

"Bjarne Hansen" <bhansen1@hotmail.com> wrote in message
news:%23EY1ZyZ%23EHA.4004@tk2msftngp13.phx.gbl...

Joe Richards [MVP] · Guest

This is possible but not with the native stuff. You would need to write or buy a
custom password filter.

joe

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net

Bjarne Hansen wrote:

Bjarne Hansen · Guest

Thank you

for the fast answer

"Miha Pihler [MVP]" <mihap-news@atlantis.si> skrev i en meddelelse
news:e9KVkaa#EHA.608@TK2MSFTNGP15.phx.gbl...

Bjarne Hansen · Guest

Hi Joe

ok
Thank you

for the fast answer

"Joe Richards [MVP]" <humorexpress@hotmail.com> skrev i en meddelelse
news:#1UsGud#EHA.2016@TK2MSFTNGP15.phx.gbl...

	Windows Server Forum Index -> Security	All times are GMT
Page 1 of 1