Enforce Password Change 1

[mikesid]

I want to start enforcing mandatory password changes every 30 days. On NT 4 it was in the user manager for domains. From there i selected accounts and then policies (or something like it) and then selected the options i wanted (change password every 30 days, password must be at least x amount of chars, cannot use the same password within x amount of days, etc).

Now on 2000 I think i found the area. In ADUC I click properties under the domain, select the GPO tab, go to Computer configuration, windows settings, security settings, account policies then password policy. Is this the right area? If so after i select the options i want do i need to do anything else to enforce this policy to all computers?

 

[Carl44]

You are in the correct area.

You always have to set Domain password policies to the "Default Domain Policy" GPO.

The keys you will need to add/change are:
Maximum password age = 30
Minimum password age = 0

You may also want to add the "Enforce password history" key to 12 passwords rememberd, as this will mean they can not use their last 12 passwords again.

The "Default Domain Policy" will be applied automatically the next time a user logs on.

To manually refresh the GPOs onto a particular PC. Run GPUPDATE from a command prompt.

Hope this helps.

 

[mikesid]

Yes, it helps alot. Thank you very much.