|
Posted by =?Utf-8?B?RGF2aWQ=?= on October 1, 2006, 4:29 am
If you were Registered and logged in, you could reply and use other advanced thread options
I had successfully implemented the password policy over last week in stages
using the "Password never expired" option.
I choose this tedious method over the staged expiry date method cos some
users had not changed their passwords for over 3-4 years! the range different
is too great for this method.
As expected, lots of feedback through the helpdesk but spread out throughout
the week. Nothing too overwhelming. :)
Thanks for your inputs!
"Roger Abell [MVP]" wrote:
> The policy that governs password aging is applied all or none to all
> accounts in the domain. Therefore GPO filtering, or multiple GPOs,
> will not accomplish what you are after. Your idea about using never
> expires, while laborious, would work.
>
> Some have suggested that a good user information campaign before
> enabling password expiration can get users to change their passwords
> beforehand, having been warned that otherwise they will face having
> to deal with their passwords being expired on day-one of the new
> policy being applied.
>
> Another thing one can do is to use a staged expiration.
> Suppose you want eventually to have a 90 expiration, and you see
> that on some future implementation day the oldest password will be
> 130 days old. How would expirations turn out if you set the expiration
> period at 120 day initially, and then reduced this by 5 days each week
> until you were at 90 ?? so that over a six week period any account that
> had a password older than 48 days when you started would have had
> to change.
>
>
>
> > Hi all,
> >
> > will be implementing password policy in my single Win2k3 domain.
> > I had a total 200 over user accounts with most of them over the 90 days
> > password expiry limit.
> >
> > I would like to implement the password policy in phrases according to
> > departments.
> > Perhaps using the AD user account "password never expire" field or GPO
> > security filtering.
> >
> > Anyone has any views on this type of implementation?
>
>
>
| 
XML site map