http://msmvps.com/search/SearchResults.aspx?q=app:weblogs&tag=Passwords+Setting+Object&orTags=0&o=DateDescendingSearch results for 'app:weblogs' matching tag 'Passwords Setting Object'en-USCommunityServer 2008.5 SP2 (Build: 40407.4157)http://msmvps.com/blogs/acefekay/archive/2012/02/16/create-an-active-directory-fine-grained-password-and-lockout-policy-passwords-settings-object-fgp-amp-pso.aspxThu, 16 Feb 2012 06:00:00 GMTd67277c4-116b-43f1-b688-e9ef184ea916:1806076acefekay<h2>Create an Active Directory Fine Grained Password and Lockout Policy Passwords Settings Object (FGP &amp; PSO)</h2> <p>Ace Fekay, MCT, MVP, MCITP EA, Exchange 2010 Enterprise Administrator, MCTS Windows 2008, Exchange 2010 &amp; Exchange 2007, MCSE 2003/2000, MCSA Messaging 2003<br />Microsoft Certified Trainer<br />Microsoft MVP: Directory Services</p> <p>Published 2/16/2012</p> <p>I thought I would put this quick blog together with mostly screenshots, on how to create a FIne Grained Password &amp; Lockout Policy PSO (Password Settings Object) that you can apply to a group of users that will override the domain level Password and Lockout Settings. </p> <p>&nbsp;</p> <p>&nbsp;<img height="543" width="751" src="https://public.blu.livefilestore.com/y1pBRzelxtCFRXZJqruGjnh78ZmgVrzdSN5aFksPNyhkxqnlJdY9zSj-uFc3CjEmBubuB_NYuF_6JCg1YXHglHE5Q/1.%20Open%20ADSI%20Edit.jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="392" width="656" src="https://public.blu.livefilestore.com/y1pBRzelxtCFRX8aC5HDFHw_49-lTWIL-kdm_-JbMLqc2uaCuFfP7pmEYUinRtWtj5bEvYJa_dCOVdqgyE4zhpeFw/2.%20Right%20Click%20ADSI%20Edit%2C%20Connect%20to.jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="421" width="668" src="https://public.blu.livefilestore.com/y1pBRzelxtCFRWJ4OepiF5Z9dlqqkFnm2XVG00nzwqpjV_NSTNpteAAfdZVvJTCHUBvS3GGMmdffhLe-FYjBYwH4w/3.%20Choose%20the%20Default%20Naming%20Context%20(DomainNC)%20-%20click%20OK.jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="607" width="677" src="https://public.blu.livefilestore.com/y1pJVKemNjzd4Zj5y93sTdDGrAeor84x1rjUH7st44JBiQsW1Q2IhT7BEmoIvSIrS2fMY7yZdDVicIi2AHYnSpmcA/4.%20Drill%20down%20DomainNC%2C%20CN-System%2C%20CN-Password%20Settings%20Container.jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="621" width="699" src="https://public.blu.livefilestore.com/y1pqddHVozfPgHyKXknZ66veS-uPRmuq-EO_EA2ZDwljxrFq83CnC51Cry8wdTLyK1leyoyO2IRfxlgS4X4cGigvQ/5.%20Click%20Next.jpg?psid=1" alt="" /></p> <p>.</p> <p><img src="https://public.blu.livefilestore.com/y1pmaLTecak7yj8WnOr54AkVqhEHJAfHvIrN83x8VqebKguLok2VNYunyt_USiNPXxY5N-rc2b658hkLeTV7oMGTg/6.%20Type%20in%20a%20name%20for%20it%2C%20such%20as%20My%20Domain%20Admins%20PSO.jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="561" width="718" src="https://public.blu.livefilestore.com/y1pmaLTecak7yjUob30Zq8z3QiJdKhWX4wAraPc7kQ2XXbctFviK818Wp_HXWAi_2x1KwoE5WDUJMdooZaqSBsqjA/7.%20For%20the%20PSO%20Precedence%2C%20we&#39;re%20going%20to%20use%201.jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="537" width="644" src="https://public.blu.livefilestore.com/y1p75njKRW9HGB5xLKGnsUFgzBVrw3nd7Iwlxa5TaH8pHed3G2wSXZDW8ezc2x-IYKVvMbkny930wgnSzOhjvV6pQ/8.%20For%20Store%20Password%20in%20Reversible%20Encryption%20attribute%2C%20type%20in%20False.jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="580" width="646" src="https://public.blu.livefilestore.com/y1p75njKRW9HGDUl2fqvpu_hCBW543Os7bKjg6tWQF6pffHVa1Zm7SkTOvC9DdPzr6ba9BwWuko4e0FPfQY3XTkoQ/9.%20Password%20History%20Length%2C%20we&#39;ll%20use%2030.jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="598" width="647" src="https://public.blu.livefilestore.com/y1pmaLTecak7yieU0fuSJzJ1P2pfeum8kFqqOrIORhl38wB6Mo4VLbSmhxjq213WBQGRkpavl9FxSlkKdbIR6s0Jw/10.%20Complexity%20-%20True.jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="524" width="643" src="https://public.blu.livefilestore.com/y1pbKrjkbdke_fYjQGHMc2eZPFQNauzRqXozLP28OaiQOcslt3kFu-uP7XQYDj6qUAO93T7iF7w6VtIUPG9-fuJaQ/11.%20Minimum%20Password%20Length%20-%2015.jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="372" width="643" src="https://public.blu.livefilestore.com/y1pbKrjkbdke_eh2JNYJs8QNc-IVNzZyCidd6Az8-HTX6n2iVqNouOi1XuwWRGfxwCMdeFL8pYZ27Oaw_4Zwi50vw/12.%20A%20user%20cannot%20change%20the%20password%20within%20one%20day%20of%20a%20previous%20change.%20The%20format%20is%20d%20hh%20mm%20ss%20(days%2C%20hours%2C%20minutes%2C%20seconds)..jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="363" width="644" src="https://public.blu.livefilestore.com/y1pXulmY1vZBYDbdis8qd9uosYKv10iOZO0d66LP5X9-lPXoS5Yu0kUTu9Mtf6K2Hnz_BmDRlRhp5BaFhi9VNXFeQ/13.%20Type%20in%2045%2000%2000%2000%20(separated%20by%20colons).jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="368" width="644" src="https://public.blu.livefilestore.com/y1pXulmY1vZBYB-dYDLjLrTB96BFNVYvbf10gRfr5kJhvJ3NgipJ4P-NgCoU6916k2-NDCNuhqIM7dXIaKMenZhoA/14.%20Five%20invalid%20logons%20within%20the%20time%20frame%20specified%20by%20XXX%20(the%20next%20attribute)%20will%20result%20in%20account%20lockout..jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="367" width="644" src="https://public.blu.livefilestore.com/y1pbKrjkbdke_fU1akeCFr7DV3PrktqhuM8gaS2ZT5CWk-eg82deuiBYh8HMSHjpPJAcXAEPpHR4vfsiscPuHm74Q/15.%20Type%20in%200%200100%2000%20-%20Five%20invalid%20logons%20(specified%20by%20the%20previous%20attribute)%20within%20one%20hour%20will%20result%20in%20account%20lockout..jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="364" width="642" src="https://public.blu.livefilestore.com/y1pQATsJ72c0LKIVRv44LuzciD9W8djN13xaiAhjtwBsqXJHLkcuCmJWR-Xc5FLA-mDmRFv-b17gK1_Su8X7DT4xw/16.%20Type%20in%201%2000%2000%2000%20-%20Account%20lockout%20duration.jpg?psid=1" alt="" />.</p> <p>.</p> <p><img height="349" width="646" src="https://public.blu.livefilestore.com/y1pE6clJ3TKy3UAJ62wgVkoGohZHyvXwJW-OnDKzWRCtf13YVoVdsPAUkAoJ-bRZcKySuPmZnx2zVm3dYSLoDMz0w/17.%20Click%20Finished.jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="411" width="644" src="https://public.blu.livefilestore.com/y1pJXp3wCScwCPiQWNaz2piavBFWgNunR4_GDI50akKtY_Sa-uaphpcrq84DTM0wRJxS3l0yH9iw4uIYQy3LwUMOg/18.%20You%20should%20see%20the%20PSO%20created%20in%20the%20middle%20results%20pane.jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="487" width="644" src="https://public.blu.livefilestore.com/y1pJXp3wCScwCPKTN1b7owolt-wYNsVExw6kXqXQ1cQ2MNaWN9Vi4GLgE6Jv_FsA3CYQP3tTt7-ORZSgsWSglp1jQ/19.%20Open%20ADUC.jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="365" width="643" src="https://public.blu.livefilestore.com/y1prO0nxec_dGsTRwijvhcgrrRkxF3xFybg_pwdw9EKPdZR5OIqG8UyioRRIwY-uxTzUffCufxaAz5BR9qQgAB8CQ/20.%20Expand%20domain%2C%20System%2C%20Password%20Settings%20Container%2C%20you%20should%20be%20able%20to%20see%20your%20PSO%20that%20you%20created..jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="400" width="642" src="https://public.blu.livefilestore.com/y1prO0nxec_dGu_kpa_WuHeJXXVAbF9r0gY9GDRnWAUXPkbHmr4i3kxuD3fSm_qdEifzMAUz5tALcc-FvkkKRF2sQ/21.%20Either%20double%20click%20on%20the%20PSO%2C%20or%20choose%20properties%2C%20Attribute%20tab%2C%20you%20can%20see%20the%20settings%20you%20created..jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="426" width="643" src="https://public.blu.livefilestore.com/y1pJXp3wCScwCPow5lzELubzw-0uY6pDIYIhH0StGe8Hp42MWNF_lAYVlW8Nzuubuxbdem4Y1i2FNgMHfriPJirQw/22.%20Scroll%20down%20to%20msDS-PSOAppliesTo%20attribute%20and%20either%20double%20click%20or%20click%20Edit.jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="416" width="648" src="https://public.blu.livefilestore.com/y1po-XaCL5iG4eembYml88fyyeD9csfIh51uw8Z7g-yd0Y6aqs8BBB13bYt12GFxZhchsiG5mqZP9_wrJwP9QeMaw/23.%20Click%20Add%20Windows%20Account%2C%20Search%20and%20add%20Domain%20Admins%2C%20then%20click%20Ok.jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="396" width="647" src="https://public.blu.livefilestore.com/y1po-XaCL5iG4fDCUkPViaxxFOT9H9e1p0CPOpI_U0daUvQDtd5YSkYmQQFsrZFpL5CbxLqw92z63ewpQpLbeamiA/24.%20This%20shows%20Domain%20Admins%20have%20been%20added.%20Click%20Ok%20again..jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="423" width="651" src="https://public.blu.livefilestore.com/y1pigQu5hOHZNaRF57NnHI_Dp1asfYkhMUj8arSZIvO8NxS6Z5wbjVtpNBbhipno-xtubz1m4ZBL_1pTE0K8nqpLA/25.%20You%20will%20now%20see%20the%20Domain%20Admins%20SID%20as%20the%20msDC-PSOAppliesTo%20attribute%20Value.jpg?psid=1" alt="" /></p> <p>.</p> <p><img src="https://public.blu.livefilestore.com/y1plafrvL-XHRKAIsnmoXy5NG7g4Tncv4Hy8CXzQ5TAvvcp5NqOYgmbJuzdEqHyVIT8F2rvPo1URuMmLDKhoYtWCA/26.%20Open%20ADUC%2C%20Under%20View%20Menu%2C%20choose%20Advanced%20Features.jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="431" width="648" src="https://public.blu.livefilestore.com/y1pigQu5hOHZNYABaJfEY8c8MD0Xzbgag2BAennJCg35ArYf0WQsj_WHua9GfFZjR3nR2hdcpSov7RQbyLwlQUsMw/27.%20While%20ADUC%20is%20still%20opened%2C%20open%20the%20properties%20box%20of%20an%20admin%20account%20and%20click%20on%20Filter%20button.jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="421" width="645" src="https://public.blu.livefilestore.com/y1ptTg9wSZsEn6U4-NCDrOxXbbcBi0ULi3-OLx3tuFL-A1Hpt03xbTjVMD41tdIKt7W9zMxBqOG0Gp9ZDL6Ws7fdg/28.%20While%20ADUC%20is%20still%20opened%2C%20open%20the%20properties%20box%20of%20an%20admin%20account.jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="397" width="647" src="https://public.blu.livefilestore.com/y1ptTg9wSZsEn7R5iVigC1AkC1ZPKHlpdE1Ed7zza3Th16-qYPa6JsRNhyPkY69chNL3fkr9wQ7OSgrEieh-4dBXw/29.%20View%20msDC-ResultantPSO%20attribute%20to%20view%20the%20PSO.jpg?psid=1" alt="" /></p> <p>.</p> <p><img height="314" width="648" src="https://public.blu.livefilestore.com/y1po-XaCL5iG4eKsWNMSpFIwJUi1nIQbcmLjIk813ULFtBUtwfsc3-upum0U_yioHu-x8A8dTyjE34n3aaUcqR7Tw/30.%20Congrats%2C%20you&#39;re%20done..jpg?psid=1" alt="" /></p> <p>.</p> <p>.</p> <p>&nbsp;</p> <h3>All comments, suggestions, errors, and critique, are welcomed!</h3> <p>Ace Fekay</p>