Modify a Fine-Grained Password Policy
Updated: February 28, 2009
Applies To: Windows Server 2008 R2
This topic explains how to use the Active Directory module for Windows PowerShell to modify a fine-grained password policy.
The following example demonstrates how to modify the minimum password length and password history count of the fine-grained password policy DomainUsersPSO:
Set-ADFineGrainedPasswordPolicy "DomainUsersPSO" -MinPasswordLength 8 -PasswordHistoryCount 24
You can use the following parameters when you set many of the common values that are associated with a fine-grained password policy:
- -ComplexityEnabled
- -Description
- -DisplayName
- -LockoutDuration
- -LockoutObservationWindow
- -LockoutThreshold
- -MaxPasswordAge
- -MinPasswordAge
- -MinPasswordLength
- -PasswordHistoryCount
- -ReversibleEncryptionEnabled
For a full explanation of the parameters that you can pass to Set-ADFineGrainedPasswordPolicy, at the Active Directory module command prompt, type Get-Help Set-ADFineGrainedPasswordPolicy –detailed, and then press ENTER.
