Solved

Fine Grained Password Policy

Posted on 2014-03-10
4
262 Views
Last Modified: 2014-03-14
HI experts,

I have successfully created the PSO and applied to myself (for testing). It is restricting me to create a 8 characters password with complexity. Its working fine.

However if I applied the PSO to a group (a security group only contain myself and one other staff) then the policy doesn't work. I have run gpupdate /force everything I made change ensuring it refresh the policy.

I will appreciate if anyone to shed some light? What am I missing here?

We are a 2008 domain (NOT R2 as one of DCs is not running R2). Domain and Forest level had been raised.

Thank you.
0
Comment
Question by:ormerodrutter
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 58

Accepted Solution

by:
Cliff Galiher earned 500 total points
ID: 39917075
The security group MUST be a global security group. Not a distribution group or universal security group or any other variant, just an odd quirk of fine grained policy processing,
0
 
LVL 23

Author Comment

by:ormerodrutter
ID: 39917128
So in general I have to create a new Global Security group and add ALL users to the group? Don't think Global group allow group nesting?
0
 
LVL 58

Expert Comment

by:Cliff Galiher
ID: 39917173
Correct.
0
 
LVL 23

Author Closing Comment

by:ormerodrutter
ID: 39928639
Thanks for your solution - spot on!!
0

Featured Post

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

OfficeMate Freezes on login or does not load after login credentials are input.
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
Suggested Courses

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question