Domain Group Policy Password Complexity

This makes a brute force attack difficult but still not impossible.

Domain group policy password complexity. Open the group policy management console 2.

For many there is no obvious reason to go any further than the defaults. The use of alt key character combinations can greatly enhance the complexity of a password. To view the password policy follow these steps.

Under domains select your domain and then right click at default domain policy and choose edit. At the right pane double click at password must meet complexity requirements. Granular password policies allow to set increased length or complexity of passwords for administrator accounts check out the article.

Expand domains your domain then group policy objects. Because the windows domain password is the main password for users in so many enterprises the default windows policies are at least the starting point for most organizations. The password policy gpo settings are applied to all domain computers not users.

Right click the default domain policy and click edit. Select default domain policy then right click and select edit to open the group policy management editor. This password policy is configured by group policy and linked to the root of the domain.

This policy setting combined with a minimum password length of 8 ensures that there are at least 218 340 105 584 896 different possibilities for a single password. If you need to create separate password policies for different user groups you must use the fine grained password policies that appeared in the ad version of windows server 2008. Computer configuration policies windows settings security settings account policies password policy.