Re: How to /password policy on Windows 2003
Ben Scott <[email protected]> Wed, 26 Aug 2009 18:00:55 -0400
| Newsgroups | gmane.comp.security.microsoft |
|---|---|
| Message-ID | <[email protected]> |
On Wed, Aug 26, 2009 at 12:47 AM, Kevin <[email protected]> wrote: > Say you have an expiry of 60 days, and the previous 6 blocked > through AD, so thats 360 months before the "first" > password can be used again, right? Nah, change your password > 7 times through a windows client and they are back to using their > first password in 5 minutes. FWIW, that much can be countered using the "Minimum password age" policy. Even setting it to 1 day (the smallest possible) will usually do the trick. -- Ben