Managing Fine-Grained Password Policies

Fine-Grained Password Policies (FGPP) was introduced with Windows Server 2008 Active Directory to facilitate multiple password policies in domains. Until this was introduced, whichever password policy was set in the default domain controller was to be applied for all domain user accounts, without any exceptions or customization options. If any category of people in a domain wished to tighten or relax password policies, then they needed to be moved to a separate domain because of the limitation with password policies. The introduction of fine-grained policies helped in such situations. This new feature allows creation of separate password policies for a list of users or groups without moving them to different domain.

Note

You can read more about fine-grained password policies at http://technet.microsoft.com/en-us/library/cc770394%28v=ws.10%29.aspx.

In this section, let's find out how to query, create, and modify these FGPP. FGPPs are stored in a system...