Posts tagged Password

manage a RODC

manage a RODC

This is a video about how to manage a RODC (read only domain controller). A read only domain controller will cache credentials (passwords) so that you don’t have to waste WAN (wide area network) bandwidth for authentication purposes. It is possible to populate the RODC records manually. Also, when you delete the read only domain controller from the Active Directory domain, it is possible to reset all users and computer passwords stored on the RODC. RODC is a feature only available in Microsoft Windows Server 2008 and requires a functional domain level of Server 2003. It a feature mainly designed for a branch office

Password Settings Object


A PSO is a password policy that is available in a Microsoft Windows Server 2008 Domain Controller. It is more granular than Active Directory group policy because it is applied to a particular user or group. Group Policy Objects (GPO) sre applied to an entire organizational unit (OU). You may try to apply several PSOs to a person, but one will take precedence. The one with the lowest number will be the policy applied. To use the features in this video, you must promote your domain to a Server 2008 level.

control passwords in group policy

control passwords in group policy

This is a short video about how to create password policies in a Server 2008 Active Directory domain. The policies are already configured, but this shows how to modify them. You can also use similar methods in Microsoft Windows Server 2003 and 2000 Server. Similar settings are also available in local group policy in an Microsoft Management Console (MMC). You can set these policies locally on Microsoft Windows 7, Vista, XP, or 2000.

The policies are located at…
Computer Configuration / Policies / Windows Settings / Security Settings / Account Policies / Password Policy

The six settings are…
Enforce Password History
Maximum password age
Minimum password age
Minimum password length
Password must meet complexity requirements
Store passwords using reversible encryption