10-3: Implement Your Organization's Password and Account Lockout Policies

Solution overview

Type of solution

Guidance and tools

Features and tools

The Default Domain Policy GPO, account lockout policies, password policies, fine-grained password policies, User_ResultantPSO.hta, Password Policy Basic from Special Operations Software

Solution summary

Modify the settings in the Default Domain GPO to implement your organization's policies regarding passwords and account lockout, and use Windows Server 2008 fine-grained password policies to manage special accounts.


Manage account-related policy settings; increase the security of privileged accounts; manage compliance.


One of the first policies encountered by and modified by administrators ...

Get Windows® Administration Resource Kit: Productivity Solutions for IT Professionals now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.