How to configure an Active Directory password policy

Published June 11, 2022 by Danny Moran

Table of Contents

PAGE CONTENT

Introduction

This is a step-by-step guide for configuring an Active Directory password policy and then deploying those settings using Group Policy.

Logon to an Active Directory Domain Controller.
Open the Group Policy Management console.
Find your Default Domain Policy, and then right-click it and press Edit.
Navigate to Computer Configuration > Policies > Windows Settings > Security Settings > Account Policies > Password Policy.
Modify the 8 policy options to fit your requirements.
Navigate to Computer Configuration > Policies > Windows Settings > Security Settings > Account Policies > Account Lockout Policy.
Modify the 3 policy options to fit your requirements.
Close the Group Policy Management Editor window.
Right-click the Domain Controllers OU, in the Group Policy Management window and press Group Policy Update, then press Yes on the popup window to instruct the domain controllers on the network to download the new policy.
When any future password changes are initiated, the new password policy will have to be met before the password can be set.