Granular Password Policy in AD 2008
Add comment June 7th, 2007
In AD 2008, Microsoft finally introduces the ability to set up a password policy for something smaller than a domain. If you think that something smaller than a domain is an OU, you’ve guessed wrong. It’s a Global Group. For sure, that’s is going to confuse lots of people but, if you think about it, it kind of makes sense. In fact, the current mechanism of setting up password policy through GPO interface doesn’t make much sense. Password policy has nothing to do with GPO. It’s a set of a domain object attributes in AD.
