Zurück
-
Titel
Fine Grain Password Policies in Password Manager not applied to users in group -
Beschreibung
After adding a group to Fine Grain Password policy in Password Manager, the users in the group are not having the password policy applied by the Fine Grain Password policy. -
Ursache
The Group added to the Policy Scope was of Scope "Universal" and Type "Security"
Fine-grained Password Polices can only work with groups of Scope "Global" and Type "Security"
-
Lösung
Fine-grained password policies apply only global security groups and user objects (or inetOrgPerson objects if they are used instead of user objects).
This is the native restriction with Windows server on Fine-grained password polices.
Refer to Microsoft links where these are explicitly and implicitly mentioned:
To make Fine Grain password policies work for groups ensure they are of scope "Global' and type "Security"