Password Policy

[netadmin06]

Hello to all, I'd like to have a policy so that my users are required to change their password every 6 months, can anyone tell me what setting i need to change to make this happen?...i have a win2k3 server domain controller

 

[IllogicallyLogical]

Open the Group Policy editor and look under....

Computer Configuraton\Windows Settings\Security Settings\Account Policies\Password Policy

Configure the "Maximum password age" policy setting.

Joey
CCNA, MCP, A+, Network+, Wireless#

 

[netadmin06]

OK great and what should I configure under minimum password age?

 

[lhuegele]

don't configure anything for minimum, just configure the maximum.

 

[wcburton]

In case you are wondering why there is a minimum password age, it is used in conjunction with remember last x passwords. If you want to prevent users from reusing passwords, then you set the remember last x setting. To keep them from quickly changing past that restriction (changing their password 10 times in one day), you set the minimum password age.

 

[netadmin06]

wcburton thanks! I want my users to be required to change their password every 6 months so I wiill see the maximum password age to 180 days. I do not care if they change their password as long as they don use one on their last 24 previously used passwords....so I guess I shold set the remember passwords to 24. So I guess I can leave the minimum password age as "0"??? is that correct?

 

[wcburton]

You can leave min password age at 0 but that means that a user could change their password 25 times in quick succession and end up back at their original password. Quick succession here is maybe 5 to 10 minutes and a lot of typing but it is possible. Setting min password age to 1 means it would take them almost a month of changing the password every day to be able to get back to the original password.

Only you know what your users are capable of and how strongly you want to enforce policies.

 

[netadmin06]

Great advice!...Thanks alot!