Security policy for Windows 2003 domain users.

Posted on 2006-06-07
Last Modified: 2010-04-18
I want to create the  a policy in my Damain controller

"put policy in Active directory to rotate password every 15 days. with Number and Char"

plz help

Question by:nareshver
    LVL 48

    Expert Comment

    Hi nareshver,

    look under computer config - windows settings - security settings - account policies - password polcies

    configure what you want in there

    do this on your default domain policy

    Author Comment


    I want to change the domain user security policy in domain controller.


    I want to create a new policy in my domain controller with the following detail
    Password Age #  15 days
    minimum password length # 6
    Password match #  chacter + numaric

    My 2nd policy is that "user not able to share his  systems drive"

    3rd policy is that "user have no right to install and removie the software"

    4th policy is that " user cann't change the network Setting"

    But don't wnat to configure the user a power user account and customize the policy.


    LVL 48

    Accepted Solution

    im not sure where the problem is with above...

    you can create a new password policy containing just the password settings if you like....but put it on the domain root, right click on the root - properties - group policy - create a new one
    LVL 9

    Assisted Solution

    Its not recommended to edit the default domain policy.  Creating a new one is always best!
    LVL 13

    Assisted Solution

    by:Kini pradeep
    would agree with Jay, the any modifications to the password policy whether you create a new one or edit the default should be done at the domain level, you cannot have seperate password policies for a site or an OU.

    Featured Post

    Why You Should Analyze Threat Actor TTPs

    After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

    Join & Write a Comment

    I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
    Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
    In this sixth video of the Xpdf series, we discuss and demonstrate the PDFtoPNG utility, which converts a multi-page PDF file to separate color, grayscale, or monochrome PNG files, creating one PNG file for each page in the PDF. It does this via a c…
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now