Mastering Active Directory - Second Edition

Resultant Set of Policy (RSoP)

When you use fine-grained password policies, some objects may have multiple fine-grained password policies applied. However, only one password policy can be applied to an object at a given time. It is not possible to merge multiple policies either.

RSoP uses the attribute value of msDS-PasswordSettingsPrecedence, which is associated with each password policy in order to decide the winning policy. A precedence value is an integer value an administrator can define. A lower precedence value means higher priority. If multiple password policies are applied to the same object, the password policy with the lower precedence value wins.

The following list further explains how password policies work in an infrastructure: ...