Recommended Password Policy

Nemesis · 02-14-2008, 09:25 AM

Im looking for recommendation on a password policy for our domain.

What types do you all use?

Right now im considering:
- At least 6 characters
- The password has not been used in the previous 10 cycles
- The password must not have been changed within the last 5 days
- The password does not contain your user account of full name
- Contains at least 3 of the following 4 criterias:
o One Upper Case character (A- Z)
o One lower case character (a- z)
o Numerals (0 -9)
o Non-alphabetic characters (!,$,#,%)

Thanks

**XtabbedoutX** · 02-14-2008, 09:39 AM

I use a minimum 6 Characters must contain

Upper and Lower case
Alpha Numeric
Must contain 1 non-alphabetic character

Nemesis · 02-14-2008, 12:30 PM

Do you know if theres a way to allow a few accounts on the network to not have to abide by that policy?

**XtabbedoutX** · 02-14-2008, 12:32 PM

You can set that if you have your users separated by an OU (Organizational Unit). You can apply separate GPO's that way.

Nemesis · 02-14-2008, 12:34 PM

So there is no other way?

How hard is it to set up OUs?

**XtabbedoutX** · 02-14-2008, 12:53 PM

It is not very difficult to create GPO's & OUs. Now making changes in GP can be dangerous if done incorrectly.

02-14-2008, 09:25 AM	#1 (permalink)
Nemesis Registered User Join Date: Nov 2003 Location: Va, USA Posts: 222 OS: Win2000.xp.vista.03server.	Recommended Password Policy Im looking for recommendation on a password policy for our domain. What types do you all use? Right now im considering: - At least 6 characters - The password has not been used in the previous 10 cycles - The password must not have been changed within the last 5 days - The password does not contain your user account of full name - Contains at least 3 of the following 4 criterias: o One Upper Case character (A- Z) o One lower case character (a- z) o Numerals (0 -9) o Non-alphabetic characters (!,$,#,%) Thanks

02-14-2008, 09:39 AM	#2 (permalink)
XtabbedoutX TSF Enthusiast Join Date: Sep 2007 Location: Oklahoma City Posts: 1,189 OS: Server 2K3 R2 SP 2, Server 2K SP4, XP PRO SP 3, Mac OS X 10.5, iPhone My System	Re: Recommended Password Policy I use a minimum 6 Characters must contain Upper and Lower case Alpha Numeric Must contain 1 non-alphabetic character

02-14-2008, 12:30 PM	#3 (permalink)
Nemesis Registered User Join Date: Nov 2003 Location: Va, USA Posts: 222 OS: Win2000.xp.vista.03server.	Re: Recommended Password Policy Do you know if theres a way to allow a few accounts on the network to not have to abide by that policy?

02-14-2008, 12:32 PM	#4 (permalink)
XtabbedoutX TSF Enthusiast Join Date: Sep 2007 Location: Oklahoma City Posts: 1,189 OS: Server 2K3 R2 SP 2, Server 2K SP4, XP PRO SP 3, Mac OS X 10.5, iPhone My System	Re: Recommended Password Policy You can set that if you have your users separated by an OU (Organizational Unit). You can apply separate GPO's that way. Last edited by XtabbedoutX; 02-14-2008 at 12:47 PM.

02-14-2008, 12:34 PM	#5 (permalink)
Nemesis Registered User Join Date: Nov 2003 Location: Va, USA Posts: 222 OS: Win2000.xp.vista.03server.	Re: Recommended Password Policy So there is no other way? How hard is it to set up OUs?

02-14-2008, 12:53 PM	#6 (permalink)
XtabbedoutX TSF Enthusiast Join Date: Sep 2007 Location: Oklahoma City Posts: 1,189 OS: Server 2K3 R2 SP 2, Server 2K SP4, XP PRO SP 3, Mac OS X 10.5, iPhone My System	Re: Recommended Password Policy It is not very difficult to create GPO's & OUs. Now making changes in GP can be dangerous if done incorrectly.