troubleshooting Question

Fine Grained Password Policies, is it working?

Avatar of Oscar Powers
Oscar PowersFlag for United States of America asked on
Windows Server 2016Active DirectoryWindows 10Azure
2 Comments1 Solution17 ViewsLast Modified:
I setup AD for Fine Grained Password Policies in a Windows Server 2016.
I am testing with a test user.  But when I used PowerShell "Get-ADUserResultantPasswordPolicy test"or CMD "net account" I got different results.
Why I got different results?  What policy apply?

AppliesTo                   : {CN=Password Staff,OU=Password Policies,OU=MyDomain Groups,OU=MyDomain ,DC=MyDomain ,DC=com}
ComplexityEnabled           : True
DistinguishedName           : CN=StaffPSO,CN=Password Settings Container,CN=System,DC=MyDomain ,DC=com
LockoutDuration             : 12:00:00
LockoutObservationWindow    : 00:15:00
LockoutThreshold            : 10
MaxPasswordAge              : 72.00:00:00
MinPasswordAge              : 1.00:00:00
MinPasswordLength           : 10
Name                        : StaffPSO
ObjectClass                 : msDS-PasswordSettings
ObjectGUID                  : b26cf7e3-5f05-4769-bf78-4a81851d2c1a
PasswordHistoryCount        : 24
Precedence                  : 400
ReversibleEncryptionEnabled : False

Net Account
ComplexityEnabled           : False
DistinguishedName           : DC=MyDomain,DC=com
LockoutDuration             : 00:30:00
LockoutObservationWindow    : 00:30:00
LockoutThreshold            : 0
MaxPasswordAge              : 90.00:00:00
MinPasswordAge              : 1.00:00:00
MinPasswordLength           : 5
objectClass                 : {domainDNS}
objectGuid                  : 641f3156-075d-4ef9-b520-a8e71d7a041d
PasswordHistoryCount        : 1
ReversibleEncryptionEnabled : False
Join our community to see this answer!
Unlock 1 Answer and 2 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 2 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros