Local Security Policy
-
I'm on one of our domain controllers and looking to enable the "Password must meet complexity requirements" setting in Local Security Policy. Does enabling this setting clear password timestamps and make users change their password earlier than they would otherwise? I've heard of some AD changes like this forcing large numbers of users change their password at once. We do not want that. Thank you.
-
Hey @Brian-Fischer great question! This setting is to control the character sets required to create an acceptable password. For instance: A-Z, a-z, 0-9, and special characters.
-
If you enable this setting - it only effects NEWLY CREATED or CHANGED passwords. So enabling this Group Policy item should not create a flood of DC activity.
Here is the full documentation to the feature:
-
Sounds good. Thank you both.