Password Policy Change Question

[Guest spirit_dm]

I would like to change the Minimum Password Length requirement from 6

character alpha-numeric to 5 character alphanumeric. I would also like to

set the Maximum Password Age to 0, so they never expire.

Will changing these settings have any visible effect on the users that are

already set and using their network accounts?

 

Also, to add multiple accounts I should be able to use dsadd user / in a

similar way that the old addusers worked in NT.

The only fields I care about are first name, last name, userID and password.

dsadd user has many, many flags. Can I just ignore them, or do I need to

pad the csv file with commas, like in addusers?

 

Thanks in advance! This is on a Windows 2003 domain. I am running Windows

2003 Server Standard Edition, and am at Service Pack 2.

[Guest Alun Jones]

"spirit_dm" <spiritdm@discussions.microsoft.com> wrote in message

news:1C9C29C6-8A46-4B1E-ABAD-BAED08DD4B4C@microsoft.com...<span style="color:blue">

> I would like to change the Minimum Password Length requirement from 6

> character alpha-numeric to 5 character alphanumeric. I would also like to

> set the Maximum Password Age to 0, so they never expire.

> Will changing these settings have any visible effect on the users that are

> already set and using their network accounts?</span>

 

No. Password strength policies apply at the time a password is changed.

Existing passwords are not affected.

 

With 5 character passwords, and no expiration, though, you are setting a

pretty low bar for attackers. Please tell me that this is a home network,

that you don't ever use for work...

<span style="color:blue">

> Also, to add multiple accounts I should be able to use dsadd user / in a

> similar way that the old addusers worked in NT.

> The only fields I care about are first name, last name, userID and

> password.

> dsadd user has many, many flags. Can I just ignore them, or do I need to

> pad the csv file with commas, like in addusers?</span>

 

To answer this conclusively, I'd have to try adding a user myself and then

report back. Why don't you try adding a user, and then report back?

 

Alun.

~~~~

--

Texas Imperial Software | Web: http://www.wftpd.com/

23921 57th Ave SE | Blog: http://msmvps.com/alunj/

Woodinville WA 98072-8661 | WFTPD, WFTPD Pro are Windows FTP servers.

Fax/Voice +1(425)807-1787 | Try our NEW client software, WFTPD Explorer.