Modify a Fine-Grained Password Policy

Applies To: Windows Server 2008 R2

This topic explains how to use the Active Directory module for Windows PowerShell to modify a fine-grained password policy.

Example

The following example demonstrates how to modify the minimum password length and password history count of the fine-grained password policy DomainUsersPSO:

Set-ADFineGrainedPasswordPolicy "DomainUsersPSO" -MinPasswordLength 8 -PasswordHistoryCount 24

Additional information

You can use the following parameters when you set many of the common values that are associated with a fine-grained password policy:

• -ComplexityEnabled

• -Description

• -DisplayName

• -LockoutDuration

• -LockoutObservationWindow

• -LockoutThreshold

• -MaxPasswordAge

• -MinPasswordAge

• -MinPasswordLength

• -PasswordHistoryCount

• -ReversibleEncryptionEnabled

For a full explanation of the parameters that you can pass to Set-ADFineGrainedPasswordPolicy, at the Active Directory module command prompt, type Get-Help Set-ADFineGrainedPasswordPolicy –detailed, and then press ENTER.