Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Password Policies outside of GPO

Posted on 2016-08-30
7
57 Views
Last Modified: 2016-08-30
I know normally GPOs are used to manage default password policies but there is another way which for the life of me I cannot recall but a former engineer had used. I am trying to locate those settings.  I remember it was "simple" when you knew where to look but I just cannot remember and searches always take me to GPO-related solutions.  

Does anyone know where these settings are?  They are domain-wide I believe.
0
Comment
Question by:sysengny
  • 3
  • 3
7 Comments
 
LVL 26

Accepted Solution

by:
pony10us earned 250 total points
ID: 41776748
Are you referring to fine grain policy available from server 2008 and above using ADSIEdit?
1
 
LVL 39

Assisted Solution

by:Adam Brown
Adam Brown earned 250 total points
ID: 41776789
Aside from ADSIEdit, it *is* possible to set password policy for the domain without a GPO in ADSIEdit by opening the default naming context, expanding it so the domain root folder shows, right click, select properties. All of the password settings applied by a Group Policy that is linked to the domain will show there. You can modify them directly there, just note that any changes you make will be overwritten by group policy either immediately or after a very short period of time unless you make sure there are no GPOs that set group policy linked directly to the domain.
1
 

Author Comment

by:sysengny
ID: 41776912
This was not in ADSIEdit. I am kicking myself for not writing it down last time I saw it.  There is an area where once sets password policies like length, etc.  for a domain. It was outside of the GPO interface but I cant recall the interface I had used.
0
NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

 
LVL 26

Expert Comment

by:pony10us
ID: 41776954
is it possible you are thinking of Active Directory Users and Computers (ADUC)?

Open ADUC
Right click the domain
Select the Attribute Editor tab
Locate and double click the attribute you want to change

If you have permissions (domain admin?) you can change it here however if there is a GPO then it will change it back as Adam stated.
1
 

Author Comment

by:sysengny
ID: 41777023
It was ADSI edit.  The former engineer was playing with PSO's

https://technet.microsoft.com/en-us/library/cc754461(v=ws.10).aspx
0
 

Author Closing Comment

by:sysengny
ID: 41777047
It was a PSO vs GPO.  I could not recall what interface I had used last time to find this (ADSI).  thanks!
0
 
LVL 26

Expert Comment

by:pony10us
ID: 41777065
Glad to help.  We use ADSIEdit to create a fine grained policy on domain admins that is stronger than for regular users.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question