Mastering Active Directory

Configuration

There are two ways to apply fine-grained password policies. The first option is to use ADAC, and the second option is to use PowerShell cmdlets.

In ADAC, browse to System | Password Settings Container. Then, right-click and go to New | Password Settings. It will open up the window where we can define the policy settings:

In the window, we can define the policy name, precedence, another password, and account lockout policy settings. Directly Applies To is the place where we can define the users or security groups this new policy applies to. In the preceding example, I added the First Line Engineers security group as the target. ...