question about password.

[NewToo]

Hello,

May i ask if there an way for me to enforce new password must contain at least 3 characters that are different than the old one on AD.

As it is now my end user can use almost the same password.


Thanks
Newtoo

 

[porkchopexpress]

This will enforce password history

http://www.microsoft.com/technet/pr...elp/8a3d5451-14bd-4f89-8f55-dc6261dbd4fc.mspx

 

[porkchopexpress]

and this link will allow you to set a minimum password length, the settings are in teh same place in 2000 Active Directory i beleive.

http://www.microsoft.com/technet/pr...elp/8a3d5451-14bd-4f89-8f55-dc6261dbd4fc.mspx

 

[monsterjta]

Everything you need is in the Default Domain Policy->Account Policies->Password Policies.

 

[cyberspace]

I think what newtoo is actually asking is not how to set up history or minimum length, but:

"May i ask if there an way for me to enforce new password must contain at least 3 characters that are different than the old one on AD."

I think the question he is asking is if the password policy can include a setting that requires at least 3 characters to be different from the old password.

The above advice would not stop a user from, for example, simply changing from "password1" to "password2", which is what i believe newtoo is trying to avoid.

I am not familiar with a way to enforce this, the typical options offer history, minimum lengh and complexity requirements, but no option to specify the number of characters which must be different.

 

[porkchopexpress]

Yes true it could be interpreted that way and if that is the case then the answer is know. I'm sure there are third party password managers that will enorce this though.

 

[porkchopexpress]

http://www.anixis.com/products/ppe/features.htm

 

[NewToo]

Hello,


Thanks all for the respones. I will check the site that PORKCHOPEXPRESS give.

AGAIN THANK YOU.

NEWTOO

 

[kameleon80]

Also I believe you can go to the same area. The password policies. Look for something that says use complex passwords, and then enable this. This will keep passwords from being able to use usernames in passwords

example:
user: myuser
password: myuserpassword

It shouldn't allow this and also you must use a different character pattern each time.