How to configure an Active Directory password policy
ฝัง
- เผยแพร่เมื่อ 10 มิ.ย. 2022
- Learn how to configure an Active Directory password policy and deploy it using group policy. In this example, I show you how to modify the Default Domain Policy with the advanced password options.
View the blog post here: www.dannymoran.com/active-dir...
Hi, I’m Danny, a London based IT consultant and sporadic blogger. You can view all my blog posts at: www.dannymoran.com - วิทยาศาสตร์และเทคโนโลยี
![เจ้าผู้เดียว - ดิด คิตตี้ [OFFICIAL MV]](http://i.ytimg.com/vi/q0NLCYKBOTo/mqdefault.jpg)
is there any solution to enable the 4 requirements of password AD together ? (uppercase + lowercase + numbers + special characters) ??
There is no way to require all 4 without using 3rd party software. I've never actually tested any of the software, so I can't recommend any, but if you do a Google search you should be able to find some Active Directory tools to help do this.
Thanks for watching!
Just a question it is compulsory to have all the users in Users folder in Active Directory Users and Computers or in different folder in Active Directory Users and Computers will also work ?
You can put the user accounts in any folder within active directory. They don't have to be within the Users folder.
Thanks for watching!
Got some question : When it is time to reset password, AD user are able to reset on their own or the admin have to reset 1 by 1?
Users are still able to reset the passwords themselves on their workstations when they expire or before they expire.
Thanks for watching!
@@danny_moran Hi there!! thanks for your previous reply. However, after my testing it seem that shared folder ask for credential then I input old pass, its response "The password of this user has expired." with no option to reset by their own. Do I miss something?
If you log the user off and then back on, it will prompt the user to change their password. Or you can press ctrl+alt+del and select change password.
By default, users can change their own password. Check their user object within Active Directory Users and Computers and make sure the option for changing the password is not ticked.
@@danny_moran ATM each user using their window user not AD user. The situation that AD user is required only when they wanna use shared folder which the credential is required to login to get to shared folder for each team. And I'm not set AD user in Credential Manager because Top level manager required each user to login every time. According to my situation, do you have any solution create an option to let user change their password?
"Check their user object within Active Directory Users and Computers and make sure the option for changing the password is not ticked" sadly, I could not find the tick you mentioned.
Without setting up some kind of self-service password reset solution, it's probably easier to just disable the password expiration.
I don't understand why you would go to the trouble of using active directory but use local user accounts.
Personally, I would get everyone using AD user accounts and then look at the password policies.