[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 488
  • Last Modified:

Exclude User Group or Computer Group from Complex Password GPO

I have a network that has a complex password policy enabled via GPO.  I need to exclude either a group of users or a group of computers (whichever is possible) from the complex password policy.  How can I do this?
0
menreeq
Asked:
menreeq
  • 2
  • 2
1 Solution
 
Toni UranjekConsultant/TrainerCommented:
Hi menreeq,

This can not be done with Windows 2003 Active Directory domain. Only one password policy can be defined for entire domain.
You should use 3rd party tool like. this one: http://nfrontsecurity.com/products/nfront-password-filter/
or wait for Windows 2008. ;)

HTH

Toni
0
 
menreeqAuthor Commented:
thanks toniur, is it possible to make it less stringent for a specific OU or user group.
0
 
menreeqAuthor Commented:
BTW, that was a question, forgot the ? mark.
0
 
Toni UranjekConsultant/TrainerCommented:
No, only one password policy per domain. Period.

You can apply anpther password policy to OU with computer accounts but this policy will affect only local user accounts defined on tis computer.
0
 
KCTSCommented:
Unless you use a 3rd party product such as "password policy enforcer", or are prepared to wait for Windows 2008 then you can only have one password and account policy per domain.
0

Featured Post

Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now