Domain Policy

In Domain Policy, you can set up password policies and account lockout policies.

Note:

The settings on this page are applied to the group policy Default Domain Policy. If this group policy is deleted, this page cannot function normally.

Password Policy

  • Maximum password age: Specify the time after which the passwords expire. Passwords will never expire if the option is disabled.
  • Minimum password age: Specify the time before which the users are disallowed to change their passwords. Passwords can be changed at any time if the option is disabled.
  • Minimum password length: Any new passwords must be at least the value specified in the text field.
  • Enforce password history: Any new passwords must be different from the previously set ones, the number of which is to be specified here.
  • Enable password strength check: Passwords must comply with the strength requirements. Please refer to the Note below for more information.
  • Store password using reversible encryption: Enabling this option will compromise the domain security. This option is not recommended unless application requirements take higher priority over password security.

Note:

To comply with the password strength requirements, your password must contain at least 3 of the following rules:

  • Uppercase letters of the Latin (including A-Z with diacritic marks), Greek, and Cyrillic alphabets
  • Lowercase letters of the Latin alphabets (including a-z with diacritic marks), Greek, and Cyrillic alphabets
  • Numeric characters (0-9)
  • Special characters, including #, $, !, et cetera
  • Unicase Unicode alphabets, including those in Asian languages

Account Lockout Policy

  • Account lockout threshold: User account will be locked out when the number of failed login attempts is beyond your specified lockout threshold.
  • Lockout duration: Locked out user account will not be unlocked until the end of your specified lockout duration.
  • Reset lockout counter after: Lockout counter will be reset after the specified time since the last failed login attempt.
Password Policy
Account Lockout Policy