Mastering Active Directory

Resultant Set of Policy

When you use fine-grained password policies, some objects may have multiple fine-grained password policies applied. However, only one password policy can be applied to an object. It is not possible to merge multiple policies either.

Resultant Set of Policy (RSoP) uses the attribute value of msDS-PasswordSettingsPrecedence, which is associated with each password to decide winning policy. A precedence value is an integer value that the administrator can define. A lower precedence value means higher priority. If multiple password policies are applied to the same object, the password policy with the lower precedence value wins.

Following list further explain how password policies works in an infrastructure:

• There are ...