[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 436
  • Last Modified:

Windows 2003 R2 - Domain Password Policies

I am currently running a Windows 2003R2 AD Domain and I want to require our employees to change their password every 90 days but there are a couple folks that I do not want to require this for.  If I set the GPO Default Domain Account Password Policies and then for the users that I do not want to enfore this password policy on just merely choose the option   "Password Never Expires"  and I will accomplish my goal?
2010-03-25-1511.png
0
preshomes
Asked:
preshomes
  • 3
1 Solution
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
You will not accomplish this goal unless you migrate to Server 2008 for ALL your domain controllers.

Password policies are domain wide and cannot be set for groups/OUs in Active Directory 2000/2003.  2008 introduced the ability to use multiple password policies (though I have not done it and frankly, everything I've read says it's a pain in the *ss to configure).  One of the requirements, if memory serves, is that all domain controllers must be 2008 or later and the domain must be in Active Directory 2008 Native Mode.
0
 
Neil RussellTechnical Development LeadCommented:
Create a seperate OU for each of the two groups of users and apply a different policy to each OU, problem solved :D
0
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
Neilsr -

You are aware that that won't work - password policies are domain wide and cannot be segmented like that.

0
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
Quote from http://technet.microsoft.com/en-us/magazine/2007.12.securitywatch.aspx

"If you run any version of Windows® domain today (Windows NT®, Windows 2000 Active Directory®, or Windows Server® 2003 Active Directory), you are limited to a single password policy per domain."
0
 
preshomesAuthor Commented:
This article supports leew's suggestion....  http://technet.microsoft.com/en-us/library/cc875814.aspx

Thanks leew
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now