Music@life

Default password policy is in 2008:

 W2k8 預設密碼規則

Ø  24 passwords remembered  記憶24組密碼

Ø  42 days max password age 最多密碼使用期間42天

Ø  1 day min password age  最少密碼使用期間1天

Ø  7 characters Minimum password length 最少密碼長度7個字元

Ø  Password must meet complexity requirements (capital letter, small letter

and one digit or non-alphabetic, also not more then 3 characters from the

username) 密碼必須符合複雜度需求(大寫字元, 小寫字元, 一個數字或非英文字元, 而且不可與使用者名稱相同超過3個字元

The password policy is defined in the Default Domain Policy by default, which is enforced by the domain controllers that make up the domain.

密碼規則定義在預設領域規則中，用來強制領域控制伺服器設定控管內的伺服器規則。

In order to migrate password properly to Windows server 2008 domain, we should modify the corresponding password policy, which can be found under: 

針對W2k8伺服器控管的領域，修改密碼規則屬性。我們應該修改合宜的密碼規則，編輯器路徑如下

"Computer configuration -> Windows Settings -> Security Settings -> Account policies -> Password policy" in "default domain policy" or in a new policy that is linked to the root of the domain and given precedence over the Default Domain Policy.

"電腦組態-->視窗設定-->安全設定-->帳號原則編輯器-->密碼原則"，位於預設領域規則或在一個新的原則裡連結到領域的根目錄，且給予最高優先於預設領域原則。