Changing Domain Security Policy

Posted on 2002-07-16
Medium Priority
Last Modified: 2010-04-13

Does anyone know what happens when I change a setting in the Domain Security Policy? More specifically.... if I change the Password Policy to enfore strong passwords and half my users current passwords don't meet the requirements will they be forced to change at next logon or not until their password expires?

Question by:Dawn_Bl
  • 2

Author Comment

ID: 7157800
I worded my example wrong... I meant if I enabled the "passwords must meet complexity requiremnts".
LVL 63

Accepted Solution

SysExpert earned 400 total points
ID: 7157817
I think that it only changes at the time they are required to change a password.
It does not check existing passwords at all, only new ones.

I hope this helps !

Expert Comment

ID: 7158681
I believe you are correct SysExpert. Policies only take affect usually when triggered (needed). Most take effect immediately since they are called immediately such as screensaver, etc.. but a password complexity policy would not be called until a new password is put added or changed.

Author Comment

ID: 7160862
Thanks SysExpert.. thanks as well for your comments jmiller. A Domain Security Policy is kind of a hard thing to test before changing it! I was envisioning very angry phone calls in the morning. I did change it though and tested and you're right, it's only the next time they change them it will enforce the policy. So my angry phone calls will be spaced out :)


Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
The article describes step by step how to validate the SRA software certificate once installed on the Site Recovery Manager server. I hope it will be very useful for all administrators of virtualized environments.
Planning to migrate your EDB file(s) to a new or an existing Outlook PST file? This video will guide you how to convert EDB file(s) to PST. Besides this, it also describes, how one can easily search any item(s) from multiple folders or mailboxes…
Watch the video to know the simple way to remove or recover or reset lost or forgotten passwords of Outlook PST file. With Kernel Outlook Password Recovery tool such operation is very easy to perform. It is a freeware with limitation to use with 500…

597 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question