|
Posted by Roger Abell [MVP] on March 17, 2007, 8:06 am
Please log in for more thread options
> -What are the differences of these security options?
>
> -Domain member: Maximum machine account password age
>
Is states how old a computer's password may be. Domain joined
machines will change their password so that it is never older than
the value stated here.
> -Interactive logon: Prompt user to change password before expiration
>
This asks:
Should the user be notified before their password has expired?
> -Minimum Password Age/Maximum Password Age
>
These are the age thresholds for user passwords.
A user cannot change their password before it is at least the
minimum age, and must before it has passed the maximum.
Use of a minimum prevents the user from changing their
password a sufficient number of times immediately so that
they can reuse their prior password as their next password,
depending on how many has been set in other policy.
> --
> Message posted via WinServerKB.com
> http://www.winserverkb.com/Uwe/Forums.aspx/windows-server-security/200703/1
>
| 
XML Sitemap