I want to make changes to the password policy in our domain (for example, include password complexity) but I want to apply it gradually, to some OU's or users group first. As far as I know the password enformcement are manage for the domain controllers, it is possible apply a different password policy for some users? Or the same seeting will be apply to all users when the DC's apply the GPO?

Regards, Amedina

  • Remember that when you change the policy, new passwords will not be forced to follow the new policy until the old passwords expire. – Clayton Aug 7 '18 at 15:55

My first answer was utter nonsense, sorry. Here we go:

If you are on Windows 2008 or higher (as you should), you can use Fine-Grained Password Policies.

Using the "new" Active Directory Administrative Center you can set these quite easily.

The gist is:

  1. Navigate to -> System -> Password Settings Container
  2. Create a new password policy
  3. Set the users / groups to which it should be applied
  • man, this is exactly what I was looking for. Thanks. – Alberto Medina Aug 7 '18 at 16:25

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.