If it is just for complexity, there is a way to set it based on OU (or group) with the domain policy.... (ears prick up...)
It involves writing or buying a custom password filter DLL. This is something I have been wanting to do as joeware for a long time but password filters are touchy things, if not done completely perfectly, LSASS blows up or you can have security exposure. Just haven't had the time to do one to the quality level that I would require to release but I have spoken to people through the years who have done it... Even on NT4 with group memberships driving the complexity settings... ------------- http://www.joeware.net (download joeware) http://www.cafeshops.com/joewarenet (wear joeware) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GRILLENMEIER,GUIDO (HP-Germany,ex1) Sent: Thursday, March 18, 2004 5:35 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] password gpo for a special group if your users are in a domain (which I assume) then you can only use a GPO at the domain level to set a PW policy. All other GPOs ignore PW policies for the domain accounts. However, you could set different PW policies for local accounts on machines and manage these policies via a GPO on an OU. So if you're talking about a special group of users in your domain, then you're out of luck (and creating a separate domain just for this is not such a great idea). If you're trying to "harden" these people's passwords, I'd go down the smartcard road anyways... /Guido -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sieber R., DP ITS, FII, DD Sent: Donnerstag, 18. M�rz 2004 09:45 To: [EMAIL PROTECTED] Subject: [ActiveDir] password gpo for a special group Hello all, i've a little problem :-) I want to relize a different password policy for one group of users. So the password settings are computer settings I'm a little bit confused how to relize this. Anyone a idea? sincerly yours Robert Sieber -- Deutsche Post ITSolutions GmbH it-systems / infrastructur Gerokstr. 18-20 D-01307 Dresden Phone: +49 (351) 4567 762 Fax: +49 (351) 4567 709 eMail: mailto:[EMAIL PROTECTED] web: http://dp-itsolutions.de List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
