Information Technology Reference
In-Depth Information
To set the Default Domain Password Policy by using Windows PowerShell, use the
Set-ADDefaultDomainPasswordPolicy cmdlet. For example, to set the Default Domain
Password Policy to a minimum of 10 characters without changing other policies, use this:
Get-ADDefaultDomainPasswordPolicy `
| Set-ADDefaultDomainPasswordPolicy -MinPasswordLength 10
Password Settings Objects (PSOs) are part of the fine-grained account policies introduced
in Windows Server 2008. The Active Directory Administrative Center was introduced in
Windows Server 2008 R2 and provides a graphical way to configure and apply PSOs.
PSOs can also be configured and applied by using the ADFineGrainedPasswordPolicy and
ADFineGrainedPasswordPolicySubject sets of cmdlets.
Creating a pSO
To create a PSO by using the Active Directory Administrative Center, follow these steps:
1.
Select the Domain (Local) node in the console tree and then double-click the System
object in the details pane.
Select the Password Settings Container in the System details pane and then click
New, Password Settings (as shown in Figure 5-27).
2.
FIGURE 5-27
The Active Directory Administrative Center
3.
On the Create Password Settings page, shown in Figure 5-28, enter the specific settings
for this password policy. The items that are required are identified by large asterisks.
