Password Policy

Even though passwords are not all that attractive as a security setting, the ability to control passwords using Group Policy can’t be left off of the top 5 list. Windows Server 2008 still uses Group Policy to determine the initial account policy settings, which have not changed since Windows 2000. The settings are initially configured in the Default Domain Policy, but they can be made in any GPO which is linked to the domain. The only thing to keep in mind is that the GPO that contains the account policy settings must have the highest priority of all GPOs linked to the domain.

The settings that you can configure include those shown below.