Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Fine Grained Password Policy

Posted on 2014-03-10
4
Medium Priority
?
275 Views
Last Modified: 2014-03-14
HI experts,

I have successfully created the PSO and applied to myself (for testing). It is restricting me to create a 8 characters password with complexity. Its working fine.

However if I applied the PSO to a group (a security group only contain myself and one other staff) then the policy doesn't work. I have run gpupdate /force everything I made change ensuring it refresh the policy.

I will appreciate if anyone to shed some light? What am I missing here?

We are a 2008 domain (NOT R2 as one of DCs is not running R2). Domain and Forest level had been raised.

Thank you.
0
Comment
Question by:ormerodrutter
  • 2
  • 2
4 Comments
 
LVL 60

Accepted Solution

by:
Cliff Galiher earned 2000 total points
ID: 39917075
The security group MUST be a global security group. Not a distribution group or universal security group or any other variant, just an odd quirk of fine grained policy processing,
0
 
LVL 23

Author Comment

by:ormerodrutter
ID: 39917128
So in general I have to create a new Global Security group and add ALL users to the group? Don't think Global group allow group nesting?
0
 
LVL 60

Expert Comment

by:Cliff Galiher
ID: 39917173
Correct.
0
 
LVL 23

Author Closing Comment

by:ormerodrutter
ID: 39928639
Thanks for your solution - spot on!!
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

876 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question