?
Solved

Fine Grained  password policy will not allow groups to be assigned to it.

Posted on 2016-10-19
4
Medium Priority
?
21 Views
Last Modified: 2016-10-20
Hey Guys,

I set up a password policy in Active directory.  Our domain is native 2012 r2 functional level.

I can assign users to the policy under the "Directly Applies TO" section.

However, I cannot apply it to a group.  I get an error that the group object cannot be found even though it does.  When I enter a partial name, it only lists user objects even though user and group objects are both checked.  I have tried from the root of the directory as well as the container that the group is located in.

Has anyone else seen this behavior and know what the fix is?
0
Comment
Question by:horsemenl
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
4 Comments
 

Author Comment

by:horsemenl
ID: 41850064
A quick update.

What is weird is that I can go to the Password Settings Container under Active Directory Users and Computers and add the DN of the group under the attribute msDS-PSOAppliesTo.

Does anyone else see groups when trying to apply the password policy under the Active Directory Administrative Center?
0
 

Author Comment

by:horsemenl
ID: 41850891
Another update:

Even though I added the group to the msD-PSOAppliesTo attribute, it does not work.  It only works on individual users, so my initial issue is still in play.
0
 

Author Comment

by:horsemenl
ID: 41851916
I have included a screenshot of the error

Screenshot of the error
0
 

Accepted Solution

by:
horsemenl earned 0 total points
ID: 41852049
I found the resolution.

Our groups are Universal and you can only apply FGPP to Global groups.  I changed the group to Global and then was able to apply it normally.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question