Cum creezi o politica de tip PSO (Domain Controller)

Trebuie sa facem o politica diferita pentru un ou nou in active directory.

Deschidem ADSI Edit pe domain controller.

Start -> run -> adsiedit.msc dupa care apasam OK.

Expand : Default Naming content\DC=yourdomain,DC=com\CN=System\CN=Password Settings Container\

Click Dreapta pe Password Settings Container si New-Object.

Selectam msDS-PasswordSettings click next

Adaugam urmatoarele valori :

msDS-PasswordsSettingsPrecedence : Value = 10

msDS-PasswordReversibleEncryptionEnabled : Value = False

msDS-PasswordHistoryLength : Value = 15

msDS-PasswordComplexityEnabled : Value = True

msDS-MinimumPasswordLength : Value = 12

msDS-MinimumPasswordAge : Value = -864000000000

msDS-MaximumPasswordAge : Value = -36288000000000

msDS-LockoutThreshold : Value = 0

msDS-LockoutObservationWindow : Value = -18000000000

msDS-LockoutDuration : Value = -18000000000

Click Finish.

Permanent