B ASOS are the key components to implementing fine grained password policies.
Let's review the highlights of some settings that beer so can contain it can contain name it should
be stream and you have to make sure to implement a naming strategy for rapier so another 13 is complexity
enabled it.
It could be true or false.
You have to define it.
If the beer so enforces the use of complex passwords and other certain as minimum or maximum password
lands and age so minimum password lands defines the length of the password and maximum and minimum password
age defines maximum amount of days before users will need to change their passwords.
Minimum defines minimum amount of time before users are able to change their passwords.
You use this often of his password his to recount to prevent users from changing their passwords multiple
times to reuse their old passwords.
Another 13 is mentioned password.
Here's to recount 2 It's a number of passwords that cannot be reused and the last set and for password
settings is reversible encryption enabled.
It could be true or false.
It defines if reversible encryption is allowed you must set it to false unless you have specific reasons
to allow a reversible encryption.
There are three account lock out sets of Piers so lock out threshold lock out observation window and
lock out duration.
The first one is a number of wrong passwords log gone that list locked account lock out operation window
it's a time period during which the number of wrong passwords will log locale and lock out.
Duration is duration after which the account will unlock automatically if not configure to an administrator
needs to unlock the account and there are some general surgeons for peers so like precedence peers so
apply it and protect it from accidental deletion.
Precedence is the number that defines the priority of the people.
So if different peer SOS apply to the same user the president's defiance.
Which one will apply.
P.S. so apply it settings is distinguished names of the user or global security groups to reach the
peers so should apply and protected from accidental deletion option certain should be true or false
and it defines whether they be a source should be protected from accidental deletion or not.
Now you can create and apply peer source in Windows Server 2012 or newer environment by using either
of the following tools you can do it with the help of Windows power shell or in active directory administrative
center.
So if you want to create and configure the ASOS with the help of our shell you can use the following.
Come on lets an active directory module for Windows power shell to create and manage a source in your
domain.
You could use new ADA fine grained password policy command let this come and let create and European
so and defines its parameters.
For example the following command creates a new pivot so named test BW DB and then specifies its sentence.
You should type new ADA.
Fine grained password policy than the name test.
P.S. w WD complexity enabled through lockout duration lockout observation window lockout dress called
Max password length Max password age and Min password age password hist to recount precedence reversible
encryption enabled true or false and protected from accidental deletion True or false.
Another common letters add fine grained password policies subject this command letter enables you to
link a user or group to an existent peer.
So for example the following command links the test BW UDP so to the editor's group named marketing.
You should type at a D.
Fine grained password.
Wallace is subject test.
BW Do subjects marketing.
Now if you want to configure peer so's by use an active directory administrative center you should follow
this procedure.
You should open active directory administrative center click manage and add navigation nodes in the
ad navigation no dialog box.
Select the appropriate target domain and then click okay in the Active Directory administrative center
navigation pane open the system container and then click password certain container.
Then in the task Spain click on you and then click.
Password sentence configure the sentence for the new European so and under directly applies to click
Add and type marketing and then click Okay.
This is the sheet.
The password policy object is the members of the global group that you created for the test environment.
Finally click okay to submit the creation of Libya's so please know that active directory administrative
center interface for peer so management uses the windows power shall command let's mentioned previously
to carry out the creation and management of PSN.
Next up will be configure and a fine grained password policy.
I'll see you there.