Leveraging Server 2008's Password Policies

Step 1 Windows Server 2003 and Windows 2000 Server password policies let administrators define only one password policy that applies to all user accounts in a domain.

Step 2 Windows Server 2008 introduces fine-grained password policies that let administrators define different password policies for different domain account categories in a single domain.

Step 3 Create Password Settings objects (PSOs) to define new fine-grained password policies.

Step 4 To define and configure the PSOs you created, use an LDAP query tool (e.g., LDP, LDIFDE, ADSI Edit), the PSOMgr or Specops