As a side note to the other discussions, you do not need to set minPwdLength *and* uASCompat. minPwdLength is for a Win2K3 domain, and uASCompat is for a Windows 2000 domain. In Windows 2000, you can also just directly edit the GP template (.adm).
 
Laura


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bahta, Nathaniel V CTR USAF NASIC/SCNA
Sent: Thursday, August 31, 2006 8:15 AM
To: [email protected]
Subject: [ActiveDir] Seperate Administrator password policy

Just wanted to field this to see if it makes any sense to any of you guys. 
 
We are going to implement a mandatory 15 character password policy for all of our administrator accounts.  The only way that makes sense is a subdomain with a separate password policy, since there is only one per domain.  I also know that I have to edit the minPwdLength attribute and the uASCompat attribute to make this work on the subdomain.  Can anyone think of another method of doing this?
 
 
Thanks,
 
Nate Bahta

Reply via email to