We finally have a use case where we need to setup a separate password policy
for a group of users. Haven't done this before, but have read about it. Domain
is 2008 R2 DFL/FFL. I used ADAC on a 2012 R2 box to create the PPO and assign
it to a group. I tested and it seems to be working exactly as
It was available starting with 2008 AD, but it’s changed greatly in 2012 in
that it has a GUI. I would look up the directions for doing it in Windows
2008 R2 AD. For that version I believe you need to use ADSI Edit and it’s
not as straightforward.
*From:* listsad...@lists.myitforum.com
There are a number of third party tools for creating the FGPP on 2008, without
using adsiedit. Take a look at joeware.net for one of them.
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On
Behalf Of Charles F Sullivan
Sent: Tuesday, December 30, 2014 10:27 AM
To:
Looks like I’m wrong about this. I just read something that seems to
suggest you can do it in ADAC from a Windows 2012 box, even if all of your
DCs are 2008 (R2). (I wondered why it even let you in the first place.)
*From:* listsad...@lists.myitforum.com [mailto:
http://blogs.technet.com/b/askpfeplat/archive/2013/10/07/fine-grain-password-policy-for-active-directory-2008-domain-does-not-apply.aspx
*Note: On Windows 8 or Server 2012 Directory Services Administration
Center (DSAC.EXE) you will find an option on a user account with a right
click for
Curious if anyone on the list is using Manage Engine's ADManager and if you
have seen instances where it will stop responding to web logins, thus requiring
you to stop and restart it on the server.
If so, has anyone found a solution for this?
-Paul
Thanks Charles that is exactly what I was looking for.
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On
Behalf Of Charles F Sullivan
Sent: Tuesday, December 30, 2014 10:56 AM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] FGPP question
7 matches
Mail list logo
