Passwords in a 2003 functional level with a 2008r2 server


due our current policy , enforced policy changes have upgrade planned weekend. 1 question has come up. have specific service account oddly enough requires lower-case passwords no numbers or special char,  there way force via powershell or gui change/reset password if required . 

example :

username   has password  of  password     lower case.  if attempt change in ad not meet requirements.  in our 2003 server able warning said did not meet requirements yet still set password. vendor issue can not fixed in time upgrade plan.

 

any ideas?

 

thank you

 


justin stabenow (i don't bother dang titles)

hi,

i think best way make use of fine-grained password policies. (new in 2008)

"...you can use fine-grained password policies specify multiple password policies within single domain. can use fine-grained password policies apply different restrictions password , account lockout policies different sets of users in domain. example, can apply stricter settings privileged accounts , less strict settings accounts of other users. in other cases, might want apply special password policy accounts passwords synchronized other data sources..."

see here: http://technet.microsoft.com/en-us/library/cc770394(ws.10).aspx

 



Windows Server  >  Group Policy



Comments

Popular posts from this blog

CRL Revocation always failed

0x300000d errors in Microsoft Remote Desktop client

Failed to query the results of bpa xpath