Domain Wide Account Policies


When working with user accounts in Active Directory, it is common to need to refer to domain-wide account policies.

Some of the items available are attribute values for various policies such as the minimum and maximum password age and the minimum password length, as well as password lockout, are determined at the domain level and apply to every user entry in the domain.

NOTE: some changes maybe implemented in 2008 servers.

These attributes are in the domain root object (aka samDomainBase) which contains attributes as:

Password Policy Related Attributes: #

Lockout Policy Related Attributes#

More Information#

There might be more information for this subject on one of the following: