Windows Server 2016 Password Policy GPO

Please like, comment and subscribe =)

In this video I am going to show you how you can configure your domain account lockout and password policies with Group Policy.

[Nedvio]

2:53 the problem with "Minimum password age 0 days" is that I can technically reset my password unlimited times during the day and override the "Enforce password history" requirement's purpose. For example, if you have set "Enforce password history" to 5, a user could just change the password 5 times
sequentially and use the same password all over again. It's a bit of a hassle to do it 24 times though.

[wagnerm]

When a user account expires and they are prompted to change their password, right now if they type a new password that doesn't meet the requirements they are presented with a dialog box that says the "password does not meet the complexity requirements" or sometimes it just tells then that the "...password did not save". Is there a way to have it display what the current complexity requirements are? Either in Win2016 or a 3rd party like Imprivata? (clients are Win7/10) It would be nice to display the requirements to the user in the change password dialog box (i would think something like a freehand box that we can type the requirements into, i'm sure it couldn't dynamically read the policy and display that). If it is possible it would certainly reduce the calls to our help desk asking what the requirements are. I can't believe that nearly every website has the capability of showing requirements (and often has a checkbox showing what you have met) but the massive Microsoft Corp can't add this into an OS.

[SlimAgnus]

FYI:

Clicking "Apply" means apply the settings and don't close the window.

Clicking "Ok" means apply the settings and close the window.

When you click "Apply" and then "Ok" you are applying the settings, then applying the settings again and closing the window.

[BigBen-qdpb]

great video you helped me a lot thank you so much

[srihariruttala]

Hi, Could you please help me with the below problem..
How to store passwords of local users (including existing users) in the configuration as a scrypt\bcrypt hash.

[olufavour]

How should I change password complexity?

[cialex]

Kind of gutting that Ms won't allow us to enforce password policies via OU by gradually linking the proper GPO, not just the default one

[cadde]

Feedback. Good material but you skipping some of policies that requires to explain for beginners. Hence it is difficult to follow the tutorial. Thanks

[TylerStone-db]

I can't see the domain default policy file. I tried running dcgpofix and still can't see the file. How do I fix this?

[clmis]

the book downloaded is not a technical book, just few pages with basic information.