1
00:00:06,970 --> 00:00:14,800
And this demonstration you'll see how to configure a domain based password policy and how to configure

2
00:00:14,800 --> 00:00:20,310
an account lock out policy so to configure a domain based password policy.

3
00:00:20,610 --> 00:00:27,940
I launch lone DC one in solar or a manager or click tools and then click group policy management in

4
00:00:27,940 --> 00:00:30,300
the group policy management console.

5
00:00:30,460 --> 00:00:38,980
I'll expand forest a datum demands a datum that com group policy so objects and right click default

6
00:00:38,980 --> 00:00:46,900
domain policy and then click add it in the Group Policy Management Editor window in the navigation pane

7
00:00:47,280 --> 00:00:50,000
under computer configuration.

8
00:00:50,050 --> 00:00:59,260
I'll expand policies windows settings security certs account policies and double click password policy

9
00:00:59,560 --> 00:01:07,630
and then double click enforce password history in the enforce password historic properties dialog box

10
00:01:07,960 --> 00:01:17,010
in the keep password history for field I'll type 20 and click okay and then double click maximum password.

11
00:01:17,050 --> 00:01:24,440
Age and turn the maximum password age properties dialog box saying the password will expire.

12
00:01:24,470 --> 00:01:34,980
Ian field I'll type 45 and click okay and then double click minimum password age in the minimum password

13
00:01:34,990 --> 00:01:40,660
Lance group dialog box and the password must be at least field.

14
00:01:40,760 --> 00:01:49,570
I'll type down and click okay and then double click password must meet complexity requirements and in

15
00:01:49,570 --> 00:01:55,600
the password must meet complexity requirements properties dialog box.

16
00:01:55,720 --> 00:01:59,330
I'll click enabled and then click Okay.

17
00:01:59,360 --> 00:02:08,380
No I won't close the group policy management added window yet and switch to configure an account lock

18
00:02:08,380 --> 00:02:08,900
out.

19
00:02:08,900 --> 00:02:16,960
Paul is a demonstration to do this in the group policy management added a window in the navigation pane.

20
00:02:16,960 --> 00:02:25,120
I'll click account lock out policy and then double click account lock out duration and in the account

21
00:02:25,120 --> 00:02:32,890
lock out duration properties dialog box I'll click define these policies certain in the minutes field.

22
00:02:32,890 --> 00:02:36,120
I'll type 30 and then click Okay.

23
00:02:36,200 --> 00:02:43,930
Then in the suggested Weller changes dialog box I'll move the suggested dwellers including the automatic

24
00:02:43,930 --> 00:02:52,390
configuration of account lock out dress code and click okay and then double click reset account lock

25
00:02:52,390 --> 00:03:02,350
out counter after and in the Reset account lock out counter after properties dialog box in the Reset

26
00:03:02,350 --> 00:03:05,550
account lock out counter after field.

27
00:03:05,650 --> 00:03:14,020
I'll type in 15 and then click Okay I'll close the group policy management Ed window and the group policy

28
00:03:14,020 --> 00:03:15,310
management console.