I'm new to the Server administration game. I'm about to push out my first group policy concerning passwords.
I'm going to do something simple. Use MS's built in complexity requirements and an max age of 6 months or so.
Quick background. I'm the first person this company has had in their IT dept. I'm trying to get everything figured out and settled. It seems half or so of the users (about 150) have the "Password never expires" checked in active directory user properties.
If I use a group policy for passwords will the GP supersede the AD user properties settings?
If not. Do I just go through AD and uncheck that for all accounts I want to be forced to change their passwords?
Thanks in advance. Let me know if there's anymore info you need!