Jump to content

GPO Registry entries


Recommended Posts

hi all,

been trying to find out where some regsitry keys are set (if at all) from a GPO

MinimumPasswordAge

MaximumPasswordAge

MinimumPasswordLength

PasswordComplexity

PasswordHistorySize

LockoutBadCount

ResetLockoutCount

LockoutDuration

RequireLogonToChangePassword

ClearTextPassword

tried hunting them down but could not find them, do they even exist?

Link to comment
Share on other sites


I'm not sure if it's kept in the registry...but most of that can be taken care of with 'NET ACCOUNTS' and PASSPROP.EXE (not included).

This command will take care of minimum password length, maximum password age, minimum password age and password history:

NET ACCOUNTS /MINPWLEN:xx /MAXPWAGE:xx /MINPWAGE:xx /UNIQUEPW:xx

Using PASSPROP.EXE you can turn on complexity and set it so that the builtin admin account can be locked out from network access (based on the lockout policy...and you'll still be able to logon at the console with the builtin admin account).

PASSPROP /COMPLEX /ADMINLOCKOUT

Edited by nmX.Memnoch
Link to comment
Share on other sites

all the settings are actually set fine, just wwanted to find out if there were actual registry entries for them or if it was just settings in the security policy, thanks for the info though Memnoch!

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...