Active Directory GPO - New Password Rules

Posted by Chris Gunner on Server Fault See other posts from Server Fault or by Chris Gunner
Published on 2009-10-29T14:06:01Z Indexed on 2010/03/30 18:03 UTC
Read the original article Hit count: 460

In implementing a GPO for Active Directory, a colleague has mentioned that they have implemented one which disallows 'similar' new password to be chosen - i.e. 'password1' cannot be changed to 'password2'.

Seeing as AD stores all passwords as hashes, and a hash of the two options above would be markedly different and certainly not related - how can this be possible?

© Server Fault or respective owner

Related posts about active-directory

Related posts about Windows