= Creating a Password Policy with a GPO =

**Summary**: How to set a password policy using a gpo. \\
**Date**: Around 2008 \\
**Refactor**: 31 December 2024: Checked links and formatting. \\
{{tag>gpo}}

= Password Policy =

On Domain Controllers with administrative tools installed:
* Go to start -> All Programs -> Administrative Tools -> Group Policy Management
* Browse to the Forest -> Domain -> Organizational Unit where you want to apply the policy
* Rightclick -> 'Create a GPO in this domain, and link it here':
[{{adpasswordpolicy01.jpg}}] \\

* Browse to Computer Configuration -> Policies -> Windows Settings -> Security Settings:
[{{adpasswordpolicy02.jpg}}] \\

Edit the 'Password Policy' and the 'Account Lockout Policy' to your needs.

Something like this should keep most environments pretty safe:
[{{adpasswordpolicy03.jpg}}] \\
[{{adpasswordpolicy04.jpg}}] \\