Determine length of user passwords?


hi together,

now little looking request hacker on how things... not! ;-)

we administering several domains in forest have same pwd-gpo settings 1 of setting being of course length eg set minimum 8 characters.

now time agao took on administration of domain of forest , found out there length set different eg 7 characters, against company's standard.

so our goal set length here 8 characters well.

ok, technical no big deal.

only... noone knows why set different in past, orginal domain admins have long left company.

our fear if set 8 characters, applications (may production relevant) might stop working users have change passwords.

on other hand there strong posibility no user using such short pwd anymore "application" might no longer exist.

so have find out how many users still using passwords 7 characters.

we definately not interested on whole passwords! hope find out legth.
(and on other hand security department never allow to decrypt pwds anyway...)

is there way accomplish that?

regards

stefan


regards stefan


definitely no way check length of user passwords. hash of passwords saved, , hash has no information length or complexity of password. however, passwords expire, if minimum length has been increased, users be notified if their new password short , prompted try again. no 1 should locked out. also, communicate policy beforehand.


richard mueller - mvp directory services



Windows Server  >  Directory Services



Comments

Popular posts from this blog

Group Policy Event ID 1058 Error Code 1326 (The user name or password is incorrect)

Suspicious event log Event ID: 4905

DCOM received error "2147746132" from...