Windows Server 2012 R2 Setting Active Directory User Password Policy (GPO) Tutorial
In a domain with Active Directory users should be given a password
policy e.g. change password every 15 days or the password must contain a
minimum of 8 characters etc. In the Group Policy Editor it is very
simple to apply such policies. And in certain situations where
convenience is a priority it is also possible to ensure that the
password policy does not irritate e.g. users can be allowed to use the
same password again or the password complexity can be relaxed a bit. The
following tutorial video shows how such is done in an Active Directory
enabled domain. These policies then are applied to Windows 10, 8.1 8
etc. clients.
For more visit http://www.windows10.ninja and http://www.2012r2.com
Transcript (machine generated so it contains errors)
Have a quick look at how to set user password policy is a group policy
management or windows server with active directory as well. I need to
get to the screen. How do we get there very simply press window in our
and the and printers in our energy plc.MSC. Click okay. You get here and
now we go to the default domain policy okay. Click on edit, and we get
to the group policy management editor, click on policies, click on
windows settings, click the security settings account policies password
policy okay. Now if we want to make sure that the user cannot use the
same password again and again okay we can set our remember password
history okay on a domain controller. The default is 24 okay on a
stand-alone domain is actually zero so, for example, if we want to make
sure that they could not the same password for at least two or three
recess okay wicket-keeper number with their what would do is stay with
the folder you disrupted a minimum password age maximum password age.
Basically every 45 days or 30 days using their warnings. They may need
to reset the password. Otherwise your login okay, so that has little
ensure that any change the password every 45 days go for that minimum
password age. So basically if you are zero, they can really set the
password immediately okay to keep us saved, shall we say, seven days for
the next seven days after a password change. They will not be the
changes again. I guess we keep seven minimum password length. You might
want to find a lightning characters and characters password must meet
complexity, you might want the keep is enabled rid of using a simple
demo machine today, so that is fine okay and complexity requirements
like uppercase, lowercase numbers of staff. Thank you for watching
windows server
Are you doing this on the primary domain controller? Also, does the DC/server know to inherit these password settings or do you have to set that (like SQL where it adopts OS password settings).
@windows Ninja , quick questions what sort of notification do the clients see on their end when a policy change is made. Thank you!
thanks alot
thank you so much
Windows Server 2012 R2 Setting Active Directory User Password Policy (GPO) Tutorial