Determine length of user passwords?
hi together,
now little looking request hacker on how things... not! ;-)
we administering several domains in forest have same pwd-gpo settings 1 of setting being of course length eg set minimum 8 characters.
now time agao took on administration of domain of forest , found out there length set different eg 7 characters, against company's standard.
so our goal set length here 8 characters well.
ok, technical no big deal.
only... noone knows why set different in past, orginal domain admins have long left company.
our fear if set 8 characters, applications (may production relevant) might stop working users have change passwords.
on other hand there strong posibility no user using such short pwd anymore "application" might no longer exist.
so have find out how many users still using passwords 7 characters.
we definately not interested on whole passwords! hope find out legth.
(and on other hand security department never allow to decrypt pwds anyway...)
is there way accomplish that?
regards
stefan
regards stefan
definitely no way check length of user passwords. hash of passwords saved, , hash has no information length or complexity of password. however, passwords expire, if minimum length has been increased, users be notified if their new password short , prompted try again. no 1 should locked out. also, communicate policy beforehand.
richard mueller - mvp directory services
Windows Server > Directory Services
Comments
Post a Comment