Set Strong Password

How force AD Users to Set Strong Password which must contain special characters by Changing ALT+CTRL+DEL.
Afiniti Exchange ADAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Hello ThereSystem AdministratorCommented:
Use GPO to do this:
Computer Configuration/Windows Settings/Security Settings/Account Policies/Password Policy
Passwords must meet complexity requirements - ENABLE
0
McKnifeCommented:
Open the default domain policy, go to the computer config - windows settings - security settings - Password policy
and look at your options. The so-called complexity requirements will only be able to enforce 3 types of characters, but not explicitely the special characters, sorry.

For that, you would need a 3rd party addition, like for example https://anixis.com/products/ppe/
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Andrew LeniartFreelance Journalist & IT ConsultantCommented:
Hi Afiniti,

Have you considered trying to set a complex password policy on both workstations and domain?
On workstations;

Start > Run > gpedit.msc
then
Computer Configuration > Windows Settings > Security Settings > Account Policies > Password Policy

Look at the settings
"Password must meet complexity requirements" and perhaps Enforce Password History

That any help?

Password Poilicy in GPO
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Hello ThereSystem AdministratorCommented:
0
Andrew LeniartFreelance Journalist & IT ConsultantCommented:
Damn you people must type fast! No one was viewing when I clicked on this question, I post my answer and two similar answers already given! lol :)
1
Afiniti Exchange ADAuthor Commented:
Password must meet complexity requirements already enabled.
0
Andrew LeniartFreelance Journalist & IT ConsultantCommented:
OP - Can you clarify and expand on what you mean by this?

which must contain special characters by Changing ALT+CTRL+DEL

Change ALT+CTRL+DEL doesn't make much sense to me?
0
Shaun VermaakTechnical SpecialistCommented:
You cannot as per #a42465901 without 3rd party tools
0
Tom CieslikIT EngineerCommented:
If you did Enabled complexity requirements, make sure policy was refreshed, so force policy on one of workstation (account)

gpupdate /force

Then hit Ctrl-Alt-Del and select Change password.

Complexity requirements are enforced when passwords are changed or created.

Check if policy is working for this workstation.
0
Shaun VermaakTechnical SpecialistCommented:
Won't make a difference, Password1 contains 3 types of characters and is a "complex" password
0
Hello ThereSystem AdministratorCommented:
We do not know whether the author required the solution involving GPO or 3rd party app, so I think points should be split.
Assisted comment #42465900 provided the only way what is possible via GPO. The best comment #42465901 confirmed that and showed what is really needed to make it possible using 3rd party app.
0
Shaun VermaakTechnical SpecialistCommented:
I disagree

How force AD Users to Set Strong Password which must contain special characters by Changing ALT+CTRL+DEL.
It cannot be done without 3rd party tools
1
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.