I have inherited an AD domain and I'm currently trying to figure out what was setup ( pretty much EVERY security and Best practices violation exists here!!) Currently I'm trying to find which GPO (there are 20) has the setting for password complexity. I should be able to find it but I haven't found a GPO with this setting turned on. It's really odd. I'm probably just missing it somewhere, but there should be a way to search all the GPO's in the domain for this setting ( assuming it wasn't done at the local machine level!!)are there any good tools (I'd prefer NOT to use powershell if I can)
thanks