|
Posted by Roger Abell [MVP] on March 23, 2008, 2:03 am
Please log in for more thread options > On Sun, 16 Mar 2008 23:33:27 -0700, Roger Abell [MVP] wrote:
>
>>> On Fri, 14 Mar 2008 16:10:35 -0400, saw wrote:
>>>
>>>> I am trying to install a software that requires that the password be
>>>> less
>>>> than 8 characters, which the security policy should only be applied to
>>>> the
>>>> local machine only which is the server that I am trying to install the
>>>> application on.
>>>>
>>>> Your feedback and recommendation would be appreciated.
>>>
>>> You have two separate issues here; one which is easy to resolve, the
>>> other
>>> is more difficult.
>>> To have password policy apply to local accounts you simply need to set
>>> the
>>> Group Policy in a GPO that only affects the local computer and not in
>>> the
>>> Default Domain Security Policy GPO. The Default Domain Security Policy
>>> GPO
>>> is the only place you can set password policy if you want it to affect
>>> all
>>> domain accounts. So, in your case you could create an OU that only
>>> contains
>>> the server in question and create and link a GPO there, or, create and
>>> link
>>> a GPO to the current OU and use security filtering such that only the
>>> server in question processes the GPO.
>>> The second issue, requiring a maximum password length of only 8
>>> characters
>>> is more difficult. The default password filter doesn't allow you to set
>>> a
>>> maximum password length, so you'll need to search for a 3rd party
>>> password
>>> filter that will allow this.
>>>
>>
>> Poster does not need to enforce a maximun password length, but
>> only needs to allow a short one for this software requirement.
>> What you outline for allowing machine local accounts to have
>> short passwords would be sufficient, assuming a domain account
>> is not needed.
>
> Sorry but a maximum password length is exactly what the poster is looking
> for. He wants to make sure that no one creates a password longer than 8
> characters. If that isn't defining a max password length then I don't know
> what the definition would be.
>
No excusing is needed. I see your reading.
I was blind-sided by reading it as a vendor's install requiring
that the service account must be able to have a 7 char max pwd !
Nope, never even ready it otherwise :-)
Roger
| 
XML Sitemap