We help IT Professionals succeed at work.

Exclude User Group or Computer Group from Complex Password GPO

Medium Priority
503 Views
Last Modified: 2010-03-17
I have a network that has a complex password policy enabled via GPO.  I need to exclude either a group of users or a group of computers (whichever is possible) from the complex password policy.  How can I do this?
Comment
Watch Question

Consultant/Trainer
Commented:
Hi menreeq,

This can not be done with Windows 2003 Active Directory domain. Only one password policy can be defined for entire domain.
You should use 3rd party tool like. this one: http://nfrontsecurity.com/products/nfront-password-filter/
or wait for Windows 2008. ;)

HTH

Toni

Author

Commented:
thanks toniur, is it possible to make it less stringent for a specific OU or user group.

Author

Commented:
BTW, that was a question, forgot the ? mark.
Toni UranjekConsultant/Trainer

Commented:
No, only one password policy per domain. Period.

You can apply anpther password policy to OU with computer accounts but this policy will affect only local user accounts defined on tis computer.
Brian PiercePhotographer
CERTIFIED EXPERT
Awarded 2007
Top Expert 2008

Commented:
Unless you use a 3rd party product such as "password policy enforcer", or are prepared to wait for Windows 2008 then you can only have one password and account policy per domain.

Explore More ContentExplore courses, solutions, and other research materials related to this topic.