Configure and Manage AD DS Passwords

 You are the IT administrator for a small corporate network. You must configure a password policy for the domain on the CorpDC server.

In this lab, your task is to edit the Default Domain Policy and configure the account policy settings as follows:

  • Configure the password polices.
    • New passwords must be different from the previous 10 passwords.
    • Users must change passwords every 90 days.
    • Users cannot change a new password for at least 14 days.
    • Passwords must be at least 10 characters long.
    • Passwords must contain uppercase letter, lowercase letter, number, and symbol characters.
  • Configure the account lockout policies.
    • If 5 incorrect passwords are entered, lock the account.
    • After a failed logon attempt, lock the account for 10 minutes.
    • Keep accounts locked for 60 minutes and then unlock the account automatically.

  1. Access the CorpDC virtual server.
    1. In Hyper-V Manager, select CORPSERVER.
    2. Under Virtual Machines, double-click CorpDC to connect to the virtual server.
  2. Modify the password policies.
    1. From Server Manager, select Tools > Group Policy Management.
    2. Maximize the window for better viewing.
    3. From the left pane, expand Forest: CorpNet.local > Domains > CorpNet.local.
    4. Right-click Default Domain Policy and select Edit.
    5. Maximize the window for better viewing.
    6. Under Computer Configuration, expand Policies > Windows Settings > Security Settings > Account Policies.
    7. Select Password Policy.
    8. From the right pane, double-click the policy you want to edit.
    9. Make sure Define this policy setting is selected.
    10. Edit the value for the policy, and then select OK.
    11. Repeat steps 2h–2j for each policy.
  3. Modify account lockout policies.
    1. From the left pane, select Account Lockout Policy.
    2. From the right pane, double-click the policy you want to edit.
    3. Make sure Define this policy setting is selected.
    4. Edit the value for the policy and then select OK.
    5. Repeat steps 3b–4d for additional policies.

Comments

Popular Posts