Solution Guide

Store 71
• Symbols
– Passwords must not contain three or more consecutive characters from
the account’s name or user’s name
Fine-Grained Password Policies
In Windows Server 2008, Active Directory Domain Services supports Password
Setting Objects (PSOs) that apply to particular global security groups or users
within a domain. A PSO can specify password length in characters, password
complexity, minimum and maximum password age, and other attributes.
Consequently, you can create multiple PSOs that correspond to the
organizational structure of your digital forensics facility. For example, you can
use PSOs to implement longer passwords that expire monthly for administrative
users and shorter passwords that expire every three months for analysts.
Active Directory User Accounts
Establishing User Accounts for Forensics Analysts
1 Open Active Directory Users and Computers :
a Click Start → Control Panel
b Double-click Administrative Tools , and then double-click Active
Directory Users and Computers
.
2 In the console tree, right-click the folder in which you want to add a user
account.
Where?
Active Directory Users and Computers
/domain node/folder
3 Point to New , and then click User .
4 In First name , type the user's first name.
5 In Initials , type the user's initials.
6 In Last name , type the user's last name.
7 Modify Full name to add initials or reverse order of first and last names.
8 In User logon name , type the user logon name, click the UPN suffix in the
drop-down list, and then click
Next .