!!! Overview
When working with user accounts in Active Directory, it is common to need to refer to domain-wide account policies. 

Some of the items available are attribute values for various policies such as the minimum and maximum password age and the minimum password length, as well as [password lockout|Active Directory Account Lockout], are determined at the domain level and apply to every user entry in the domain.

 __NOTE:__ some changes maybe implemented in 2008 servers.

These attributes are in the [domain root object] (aka samDomainBase) which contains attributes as: 
! Password Policy Related Attributes: 
* [max-Pwd-Age Attribute]
* [minPwdLength] 
* [minPwdAge]
* [pwdHistoryLength]
* [pwdProperties]

! Lockout Policy Related Attributes
* [lockout-Threshold]
* [lockOutObservationWindow]

!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]