Question In the lab, you configured the password settings for all users within the default domain policy
and you configured the password settings for administrators within a PSL.
What other options were available to help you accomplish the solution?
Answer You could have created a PSL with specific settings for all users, configured it with a very
high precedence and linked it to the domain users security group.
The benefit would be that there is only one interface for managing domain password policies and the
default settings for local accounts on domain members can be set differently across the whole domain.
Question In the lab, you were using precedence for the administrative PSL with a value of ten.
What is the reason for this?
Answer.
The administrative peso is very restrictive, so the precedence should be low.
However, there might be groups of administrators in the future with more restrictive settings, such
as a subset of administrators to access human resources, data or service accounts for which you might
want to enforce longer passwords with administrative rights.
The change less frequently.
For these reasons, using a value of ten allows some space for implementing pieces that are more precise.