Set up global account policies for a domain. This information is declared in the domain as default settings. For domains from the functional levels Windows Server 2008 R2 and above, it is possible to define multiple account policies. This allows individual users and groups to be subjected to stricter account policies as intended for global groups. Refer to your Active Directory documentation for more information about the concept of fine-grained password policies under Windows Server.
You can also define password policies in One Identity Manager that you can apply to the user account passwords.
NOTE: password policies, global account policy settings for the Active Directory domain, and Active Directory account policies are all taken into account when verifying user passwords.
Detailed information about this topic
- Creating and editing Active Directory account policies
- Assigning Active Directory account policies to Active Directory user account and Active Directory groups