Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

AD password complexity and covering my butt

Posted on 2014-04-24
4
Medium Priority
?
342 Views
Last Modified: 2014-04-24
Pretty sure I know the answer to this one but just looking for a confirmation from other experts.

Im about to make a change to the AD password length and complexity GPO. Im pretty sure flipping this on will only affect users once their password is expired and needs to be changed. Anyone whos password still is within the expiration limit will be able to use the non-complex password until the day their password needs to be changed. Then complexity will be required.

Am I right, just double checking before pulling the trigger.
0
Comment
Question by:Joseph Daly
4 Comments
 
LVL 16

Assisted Solution

by:gurutc
gurutc earned 664 total points
ID: 40020143
You're right.  As long as you're using the built-in password management.  Other tools like SpecOps can be more finicky.

- gurutc
0
 
LVL 9

Assisted Solution

by:stu29
stu29 earned 668 total points
ID: 40020145
You are correct.  This will only apply when they are prompted to change it or you try to change someones
0
 
LVL 29

Accepted Solution

by:
becraig earned 668 total points
ID: 40020164
0
 
LVL 35

Author Closing Comment

by:Joseph Daly
ID: 40020191
Thanks guys. Always like to double and triple check these things.
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
A bad practice commonly found during an account life cycle is to set its password to an initial, insecure password. The Password Reset Tool was developed to make the password reset process easier and more secure.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

886 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question