TopicActive Directory →
Simple definition
A specific password policy applied to certain users or groups.
Technical definition
The CCPRs allow for, have several policies of complexity, lock-up and expiration in the same area.
What’s the point? ?
Apply stricter rules to privileged accounts.
Concrete example
Administrators may have a different lock threshold from standard users.
Common problems
- PSO priority misunderstood.
- Policy applied to the wrong group.
- Excessive complexity.
Related terms
To be noted: precise behaviors and commands may vary depending on the versions, products and architectures.