Account policies in edit is defined the default settings for security related attributes that are assigned
to user objects.
In aid it is account policies classify into three different groups of Saddam's password policy account
look out and Canberra's policy.
You can configure a password policy and account lock out settings in the local policies certainly for
an individual.
Windows Server 2016 server or you can configure all three groups of settings for the entire domain by
using the group policy management console in edit is one local policies set and sound group policies
sentence conflict group policies sentence override over local policies sadness in group policy and management
within 80 days.
Most policy settings can apply at different levels within the ADF structure domain site or all you however
account policies for domain accounts can apply only at one level.
In aid it is to the entire domain therefore only one set of account policy settings can apply to an
ADT as domain.
The password policy is one of the most important policies when securing your ADT yes.
User accounts use the password policy to configure the properties of the passwords that users might
choose.
You use these settings to ensure that users can not use simple passwords which provide insufficient
potential against password attacks.
You define the password policy by using the following sentence Litchfield said in his enforce password
history.
This is the number of unique new passwords that must be associated with a user account before an old
password can be reused.
The default setting is twenty four previous passwords.
When do you use the sentence with a minimum password.
Age certain the enforced password histories certain prevents constant reuse of the same password.
The next set in is maximum password age.
This is the number of days that a user can utilize their password before they must change it regularly.
Changing passwords helps prevent the compromise of passwords.
However you must balance this security consideration against the logistical considerations that result
from requiring users to change passwords too often the default setting of four to two days is appropriate
for most organizations.
The next setting is minimum password age.
This is the number of days that a password must be used before the user can change it.
The default well here is one day which is appropriate.
If you also enforced password history you can restrict the constant use of the same password.
If you use this certain with enforced password keys to reset it.
Next stop is minimum password lands.
This is the minimum number of characters that a user password must contain the default wealthiest 7.
This default is a widely used minimum but you should consider increasing their password length to at
least 10 characters to enhance security.
The next set in is complexity requirements.
Windows Server includes a default password filter that is enabled by default and you should not disable
it.
The filter requires that a password have the following characters does not contain your name or your
username contains at least 6 characters and contains characters from three of the following four groups
uppercase letters lowercase numerals and special non alphanumeric characters such as exclamation mark
at sine hash and so on.
Next up we'll be talking about account lock out policies.