Password Policies

You can protect user accounts on a domain by applying password policies to the domain user accounts. You can ensure that the users do not use the.same password by applying password history options. The age for a password determines the validity of the password. You can secure the password by implementing maximum and minimum ages for the password. The default age of a password in Windows Server 2003 is 42 days. You can also set a length for the password using the minimum password length feature. In addition, you can secure passwords by enabling complexity requirements for passwords and storing passwords using reversible encryption methods.

The default password policies in Windows Server 2003 are:

> Enforce password history - Specifies the number of passwords the user can reuse before creating a new password

> Maximum password age - Specifies the time for expiry of the password. Windows Server 2003 prompts the user to change the password when the password expires.

> Minimum password age - Species the time for which the user can use a password

> Minimum password length - Specifies the number of characters the password must contain

> Password must meet complexity requirements - Specifies that the password must meet the complexity requirements

> Store passwords using reversible encryption - Specifies to store passwords

To view default password policies:

1. Open the Group Policy Object Editor console. The Group Policy Object Editor console appears.

2. Expand Windows Settings under Computer Configuration.

3. Expand Security Settings under Windows Settings.

4. Expand Account Policies under Security Settings.

5. Click Password Policy. The Password Policy appears.

To set password history options:

1. Open Group Policy Object Editor console. The Group Policy Object Editor console appears.

2. Expand Windows Settings under Computer Configuration.

3. Expand Security Settings under Windows Settings.

4. Expand Account Policies under SecurIty Settings.

5. Click Password Policy. The Password Policy appears

6. Double-click Enforce password history. The Enforce password history Properties dialog box appears.

7. Select the Define this policy settIng check box.

8. Enter the value in the passwords remembered spin box.

9. Click Apply.

10. Click OK.

To set the Maximum age for passwords:

1. Open Group police Object Editor console. The Group Policy Object Editor console appears

2. Expand Windows Settings under Computer Configuration.

3. Expand Security Settings under Windows Settings.

4. Expand Account Policies under Security Settings.

5. Click Password Policy. The Password Policy appears.

6. Double-click Maximum password age. The Maximum password age Properties dialog box appears.

7. Select the Define this policy setting check box.

8. Enter the value in the days spin box.

9. Click Apply.

10. Click OK.

To set the Minimum Age for passwords:

1. Open Group Policy Object Editor console. The Group Policy Object Editor console appears

2. Expand Windows Settings under Computer Configuration.

3. Expand Security Settings under Windows Settings.

4. Expand Account Policies under Security Settings.

5. Click Password Policy. The Password Policy appears.

6. Double-click Minimum password age. The Minimum password age Properties dialog box appears.

7. Select the Define this policy setting check box.

8. Enter the value in the days spin box.

9. Click Apply.

10. Click OK.

To set minimum length for the password:

1. Open Group Policy Object Editor console. The Group Policy Object Editor console appears.

2. Expand Windows Settings under Computer Configuration.

3. Expand Security Settings under Windows Settings.

4. Expand Account Policies under Security Settings.

5. Click Password Policy. The Password Policy appears

6. Double-click Minimum password length. The Minimum password length Properties dialog box appears.

7. Select the Define this policy setting check box.

8. Enter the value in the characters spin box.

9. Click Apply.

10. Click OK.