1

My question:

Is it possible to enforce Group Policy into Active Directory Federation Service?

I have ADFS, Web application proxy and a web server. I wish to configure it so that a user who logs into the ADFS via the web page can be enforced with a group policy, such as change the user account password when first login, change password after 90 days.

Is this implementation possible?

5
  • 1
    No. Those settings are only enforced by policies that are in the scope of domain controllers where the accounts reside.
    – Greg Askew
    Jul 9, 2019 at 13:37
  • I see. May I ask you whether is there such configuration (GPO, account policy) in the ADFS?
    – xxestter
    Jul 10, 2019 at 0:32
  • Are these external users or internal domain-joined users? Internal users will be forced to do this when they login to their desktop.
    – rbrayb
    Jul 10, 2019 at 19:31
  • @nzpcmad, they are external users.
    – xxestter
    Jul 11, 2019 at 1:39
  • Right, so they are not domain-joined - see the first comment.
    – rbrayb
    Jul 11, 2019 at 18:36

0

You must log in to answer this question.

Browse other questions tagged .