1
00:00:07,000 --> 00:00:13,080
There are several options available for configure and a user account policies.

2
00:00:13,300 --> 00:00:21,210
When you are administering an 18 year environment local pool is a sentence with SEC ball dirt and must

3
00:00:21,210 --> 00:00:29,440
see each individual Windows Server has its own set of account policies which apply to account created

4
00:00:29,530 --> 00:00:38,260
and managed on the local computer to configure these policies settings open the local security policy

5
00:00:38,260 --> 00:00:48,160
console by Iran SEC Paul DOD embassy at the command prompt and you can locate the password policy and

6
00:00:48,430 --> 00:00:56,200
account policy settings within the local security policy council by expanding security assistance and

7
00:00:56,200 --> 00:00:58,460
then expand an account policies.

8
00:00:58,480 --> 00:01:05,930
As for group policy with Group Policy and Management in aid it is the main environment you can domain

9
00:01:05,940 --> 00:01:13,420
wide to count all assistance within the group Policy Management Editor to find the settings the main

10
00:01:13,430 --> 00:01:22,240
wired account policies settings expand the computer configuration node expand the policies node expand

11
00:01:22,240 --> 00:01:31,090
the window certain snowed and expand their security settings node and then expand the account policies

12
00:01:31,120 --> 00:01:39,490
node the settings found within the account policies node are the same sentence want in the local security

13
00:01:39,490 --> 00:01:47,200
policy with the addition of the girl Burrus policies sentence that apply to domain authentication the

14
00:01:47,200 --> 00:01:54,880
group policy account policy settings exist in the template of every GPO that you create in the group

15
00:01:54,880 --> 00:02:04,360
policy management console however you can apply an account policy only once in a domain and in only

16
00:02:04,360 --> 00:02:05,820
one GPO.

17
00:02:05,890 --> 00:02:12,880
This is the default domain policy and it links to the root of the ADT as domain.

18
00:02:12,970 --> 00:02:20,710
Therefore the account policies sentence of the default domain policy apply to every computer that has

19
00:02:20,710 --> 00:02:22,410
joined to the domain.

20
00:02:22,420 --> 00:02:30,190
Please note that if sentence conflict between the account policies Saturns and the local security policy

21
00:02:30,550 --> 00:02:38,700
and the current policies certainly in the domain default domain policy GPO the default domain policies

22
00:02:38,700 --> 00:02:41,050
certainly take precedence.

23
00:02:41,050 --> 00:02:50,200
So when you initially install a Windows operating system such as Windows 8 dot 1 windows turn or Windows

24
00:02:50,200 --> 00:02:59,410
Server 2016 or 19 the computer will have a password policy with surgeons configure tent established

25
00:02:59,410 --> 00:03:07,060
by default but the account lock out policy does not have any settings configured when you install a

26
00:03:07,060 --> 00:03:15,520
domain the default domain policy that is created contains all three policies you can make changes to

27
00:03:15,610 --> 00:03:23,560
any of the policies including configuring the settings in the account lock out policy however you need

28
00:03:23,560 --> 00:03:28,770
to consider the implications carefully before doing so.

29
00:03:28,870 --> 00:03:37,360
In most cases your organization will already have established domains and computer systems that have

30
00:03:37,360 --> 00:03:39,490
this certainly configured.

31
00:03:39,490 --> 00:03:48,280
Most organizations also have numerous written security policies that dictate standards for passwords

32
00:03:48,340 --> 00:03:52,180
and lock out and account lock out policies.

33
00:03:52,180 --> 00:04:00,970
In this cases you cannot make changes without approval or without addressing the region's security policies.