Changing the Password GPO

[matrix101]

Hello,

we currently have server 2003 and have the GPO set to use complex passwords. Still users are able to use the word "Password" in their passwords, some use Password1 or 1Password2, ect.

How can I prevent users from doing this?

thanks.

 

[jcrapps]

Do you mean with newly created accounts? I know that current accounts will not be affected by this GP setting. What level did you set this GPO at?

 

[markdmac]

Password policies can only exist in ONE policy and at the Domain Level. Typically they are set in the Default Domain Policy.

Unless you have disabled that policy, you need to set your password settings in there. Note: Password settings are all that I would recommend you ever set in the default domain policy. Use a new policy for any other settings.

Longhorn will allow us to configure multiple password policies, but we are not there yet.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[matrix101]

Yes it is set at the Domain level. This is not necessarily for new users. Existing users are able to change there passwords to include the word "Password". Could I possibly edit the Passfilt.dll to include the word Password?

 

[markdmac]

Editing of passfilt.dll went away with NT4.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.