Fun and Games Active Directory Password Policies

re: Fun and Games Active Directory Password Policies

Doug Gabbard [MSFT] — Sun, 20 Jan 2013 21:16:04 GMT

Good post on scripting guys using a single powershell command to retrieve default password policy. You can replace the net accounts /domain above with the powershell command Get-ADDefaultDomainPasswordPolicy. But will still need the net /accounts (without the /domain switch) to see the local password policy.

blogs.technet.com/.../powertip-get-the-default-domain-password-policy.aspx

re: Fun and Games Active Directory Password Policies

Doug Gabbard [MSFT] — Mon, 14 Jan 2013 18:46:29 GMT

The sub OU is a question that I deal with all the time, and I like AskDS's response as always. If you also look in the delegation white paper you will see additional information why sub OUs are not recommended under the domain controller OU.

www.microsoft.com/.../details.aspx

Most environments I have seen with the sub OUs, have not had an issue. The trouble is since it would probably work for a long time, it may be overlooked as a cause to an issue. And if you don't REALLY need it as the AskDS post mentions, why put yourself in a position to have an issue someday down the road?

re: Fun and Games Active Directory Password Policies

Mike Kline — Mon, 14 Jan 2013 17:35:11 GMT

Good blog Alan, quick point about the sub/child OUs under the Default Domain Controllers OU. I have seen that too but a few years ago the askds team had a question on it

blogs.technet.com/.../friday-mail-sack-saturday-edition.aspx

Have you seen any of the issues they described. I try to stay away from sub-OUs under the DC OU.

Thanks

Mike