Fine Grained Password Policy for Group of Users - Server 2008 R2

[xendrome]

Anyone have a decent guide or tips on setting up a Fine Grained Password Policy for a user group on my Server 2008 R2 domain? I am seeing a lot of chatter about how it isn't easily done through the GUI and someone recommended the use of "Specops Password Policy Basic", which looks like it might work.

Thoughts or guides?

[sc302 Veteran]

because the gpo isn't user based that this policy is based on it makes it very difficult to do within windows group policy.

I would start in a small test vm environment and check it out there. See how granular you can get. Also check out the demo.

http://www.specopssoft.com/products/specops-password-policy/specops-password-policy-demo

[xendrome]

Hmm, well I have one Global Security group that I want to apply it to those members, is that even possible?

[sc302 Veteran]

not with GP. With specops it apparently can do that.

In GP password security is in the computer policy. This policy only gets applied to computers (which is why it is in the computer policy), not users. As dumb as that is.