Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

On a windows 2008 AD controller how can the maximum password age policy be changed, for all domain accounts?

share|improve this question
up vote 1 down vote accepted

The default domain policy has some of the password policies set by default. This is where you can set the password policies. see Password Policy and for the new features see Fine grained password policies

Prior to Windows Server 2008, you could have only one password and account lockout policy per domain, which applied to all users in the domain. As something new in Windows Server 2008 AD DS, it is now possible to define different sets of password or lockout policies to different set of users in the same domain.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.