{"id":52,"date":"2009-01-11T15:32:00","date_gmt":"2009-01-11T15:32:00","guid":{"rendered":"http:\/\/web03.partners.extranet.chrisse.com\/wordpress\/?p=52"},"modified":"2009-01-11T15:32:00","modified_gmt":"2009-01-11T15:32:00","slug":"fine-grain-password-policy-tool-1-0-2300-0-rtm","status":"publish","type":"post","link":"https:\/\/blog.chrisse.se\/?p=52","title":{"rendered":"Fine Grain Password Policy Tool 1.0 (2300.0) RTM"},"content":{"rendered":"

Build:<\/span><\/span><\/strong> FGPP RTM_2300-20081223.0
\n<\/span><\/span>Branch<\/span><\/strong>: FGPP-RTM-branch.
\nUsage<\/strong>: Production Usage. <\/span><\/p>\n

 <\/p>\n


\nGeneral Information<\/span><\/strong><\/p>\n

 <\/p>\n

This build is the final RTM build of the Fine Grain Password Policy Tool. (<\/span>FGPP RTM_2300-20081223.0)<\/span><\/span> For full release notes see the document \u201cRelease notes for Fine Grain Password Policy Tool\u201d included in the package, as well to be released on the website later today, other documentation available with this release are.
\n<\/span><\/p>\n

 <\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>Quick Start Guide for Fine Grain Password Policy Tool<\/span><\/p>\n

 <\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>Windows PowerShell Usage for Fine Grain Password Policy Tool<\/span><\/p>\n

 <\/p>\n

\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span><\/span>Password Policy Samples for Fine Grain Password Policy Tool<\/span><\/p>\n

 <\/p>\n


\nAcknowledgements<\/span><\/strong>
\n
\nStanimir Stoyanov,<\/strong> thanks<\/span> for providing the incredible support and your ideas while this piece of software was being written. Especially for the work that was done with the Native Methods. Please have a look at this blog for other projects he has been released <\/span>http:\/\/www.stoyanoff.info<\/span><\/a><\/span><\/p>\n

 <\/p>\n


\nBj\u00f6rn \u00d6sterman, t<\/span><\/strong>hanks for your help and support with the initial design of the Password Policy class.<\/span><\/p>\n

 <\/p>\n


\nTrueSec Team<\/span><\/strong>, thanks for providing support while this piece of software was being written.<\/span><\/strong><\/p>\n

 <\/p>\n

Overview of Fine Grain Password Policies in Windows Server 2008:
\nhttp:\/\/technet2.microsoft.com\/windowsserver2008\/en\/library\/056a73ef-5c9e-44d7-acc1-4f0bade6cd751033.mspx<\/span><\/span><\/a><\/span><\/p>\n

 <\/p>\n

Download<\/span><\/strong><\/p>\n

Download Fine Grain Password Policy Tool (x86) 1.0.
\nhttp:\/\/blogs.chrisse.se\/files\/folders\/fgpp\/entry51.aspx<\/a><\/p>\n

Download Fine Grain Password Policy Tool (x64) 1.0.
\nhttp:\/\/blogs.chrisse.se\/files\/folders\/fgpp\/entry50.aspx<\/span><\/a><\/strong><\/span><\/p>\n

 <\/p>\n

Quick Start Guide<\/span>.
\n<\/span>http:\/\/blogs.chrisse.se\/blogs\/chrisse\/pages\/fine-grain-password-policy-tool.aspx<\/span><\/a><\/span><\/p>\n

 <\/p>\n

System Requirements<\/span><\/strong><\/p>\n

Fine Grain Password Policy Tool 1.0 are \u201cSupported\u201d on the following platforms<\/span><\/p>\n

 <\/p>\n

\u00b7<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>Windows Server 2008<\/span><\/p>\n

\u00b7<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>Windows Server 2008 R2<\/span><\/p>\n

\u00b7<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>Windows Vista with Service Pack 1 or later<\/span><\/p>\n

\u00b7<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>Windows 7<\/span><\/p>\n

\u00b7<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>Windows Server 2003 with Service Pack 1 or later and Windows Server 2003 R2<\/span><\/p>\n

\u00b7<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>Windows XP Service Pack 2 or later<\/span><\/p>\n


\nPrerequisites
\n<\/span><\/strong>Before installing this build, you must have:
\n<\/span><\/p>\n

Windows Server 2008, Windows Server 2008 R2 and Windows Vista, Windows 7<\/span><\/span><\/p>\n

\u00b7<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>Windows Server 2008 Active Directory Domain.<\/span><\/p>\n

\u00b7<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>Windows PowerShell installed (for command-line and scripting support)<\/span><\/p>\n

Windows Server 2003 and Windows XP<\/span><\/p>\n

\u00b7<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>Microsoft .NET Framework 2.0.<\/span><\/p>\n

\u00b7<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>Microsoft Management Console 3.0 <\/span><\/p>\n

\u00b7<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>Windows Server 2008 Active Directory Domain.<\/span><\/p>\n

\u00b7<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span><\/span>Windows PowerShell installed (for command-line and scripting support)<\/span><\/p>\n

\u00a0
\nUsage information:<\/span><\/span><\/strong><\/p>\n

Fine Grain Password Policy Tool Core PowerShell Samples.<\/span><\/strong><\/p>\n

FGPP\u00a0RTM supports the following PowerShell Commands.
\n<\/span>
\nCreate new Password Policies<\/span><\/span><\/em><\/strong><\/p>\n

New-PasswordPolicy <Name> [-domain <FQDNDomainName>] >] [\u2013server <DCFQDN>] -MaximumPasswordAge <timespan> -MinimumPasswordAge <timespan> -MinimumPasswordLength <PassswordMinLenght> -PasswordComplexityEnabled <$True\/$False> -PasswordReversibleEncryptionEnabled <$True\/$False> -PasswordSettingsPrecendence <PrecendenceOrder> -PasswordHistoryLength <NumberOfPasswords> -LockoutDuration <timespan> -LockoutObservationWindow <timespan> -LockoutThreshold <int> -AppliesTo *SupportedNameFormats<\/span><\/p>\n

 <\/p>\n


\nModify existing\u00a0Password Policies<\/span><\/em>
\n<\/span><\/span><\/em><\/strong>Modify-PasswordPolicy <name> [-domain <FQDNDomainName>] >] [\u2013server <DCFQDN>] [-MaximumPasswordAge <timespan>] [-MinimumPasswordAge <timespan>] [-MinimumPasswordLength <PassswordMinLenght>] [-PasswordComplexityEnabled <$True\/$False>] [-PasswordReversibleEncryptionEnabled <$True\/$False>] [-PasswordSettingsPrecendence <PrecendenceOrder>] [-PasswordHistoryLength <NumberOfPasswords>] [-LockoutDuration <timespan>] [-LockoutObservationWindow <timespan>] [-LockoutThreshold <int>] -AppliesToAdd *SupportedNameFormats -AppliesToRemove *SupportedNameFormats<\/span><\/p>\n

 <\/p>\n


\n<\/span><\/span><\/em><\/strong>Delete Password Policies<\/span><\/span><\/em><\/strong>
\n<\/span><\/span><\/em><\/strong>Delete-PasswordPolicy <name> [-domain <FQDNDomainName>] [\u2013server <DCFQDN>] [-all]<\/span><\/p>\n

 <\/p>\n

Reame Password Policies<\/span><\/span><\/strong><\/em>
\n<\/span><\/span><\/em><\/strong>Rename-PasswordPolicy <name> [-domain <FQDNDomainName>] -NewName <name><\/span><\/p>\n

 <\/p>\n


\nAdd users and global groups to an existing Password Policy<\/span><\/em>
\n<\/span><\/span><\/em><\/strong>Add-PasswordPolicy -Name <name> [-domain <FQDNDomainName>] [\u2013server <DCFQDN>] -AppliesTo *SupportedNameFormats<\/span><\/p>\n

Remove users and global groups to an existing Password Policy
\n<\/span><\/span><\/strong><\/em>Remove-PasswordPolicy -Name <name> [-domain <FQDNDomainName>] [\u2013server <DCFQDN>] -AppliesTo *SupportedNameFormats [-all]<\/span><\/p>\n

 <\/p>\n

Get the Effective PasswordPolicy for one or more users objects<\/span><\/span><\/strong><\/em><\/p>\n

Get-PasswordPolicyEffective <name> [-domain <FQDNDomainName>] [\u2013server <DCFQDN>]<\/span><\/p>\n

Export Password Policies<\/span><\/span><\/em><\/strong><\/p>\n

Export-PasswordPolicy <name> <path> [-domain <FQDNDomainName>] [\u2013server <DCFQDN>]<\/span><\/p>\n


\n<\/span>Import Password Policies<\/span><\/span><\/em><\/strong><\/p>\n

Import-PasswordPolicy <name> <path> [-domain <FQDNDomainName>] [\u2013server <DCFQDN>]<\/span><\/p>\n

————————————————————————————————————————————————————–<\/span><\/strong><\/p>\n

*SupportedNameFormats: <\/span><\/strong>[DomainUserN, “First LastName”, {4fa050f0-f561-11cf-bdd9-00aa003a77b6}, example.microsoft.com\/software\/user name, <\/span>usern@example.microsoft.com<\/span><\/span><\/a><\/span>, S-1-5-21-397955417-626881126-188441444-501]<\/span><\/p>\n

\u00a0
\n<\/span>Fine Grain Password Policy Tool Additional PowerShell Samples.
\n<\/span><\/strong>————————————————————————————————————————————————————–<\/span><\/strong><\/p>\n

 <\/p>\n

How to use the Get-PasswordPolicy and New-PasswordPolicy to copy an existing PasswordPolicy<\/span><\/span><\/span><\/span><\/em><\/strong><\/p>\n

 <\/p>\n

Note:<\/span><\/strong> Any parameter can be used with New-PasswordPolicy override settings from the existing policy.<\/span><\/span><\/p>\n

 <\/p>\n

Get-PasswordPolicy <name> [-domain <FQDNDomainName>] |<\/strong> New-PasswordPolicy <Name> [-domain <FQDNDomainName>] [-MaximumPasswordAge <timespan>] [-MinimumPasswordAge <timespan>] [-MinimumPasswordLength <PassswordMinLenght>] [-PasswordComplexityEnabled <$True\/$False>] [-PasswordReversibleEncryptionEnabled <$True\/$False>] [-PasswordSettingsPrecendence <PrecendenceOrder>] [-PasswordHistoryLength <NumberOfPasswords>] [-LockoutDuration <timespan>] [-LockoutObservationWindow <timespan>] [-LockoutThreshold <int> -AppliesTo * SupportedNameFormats]<\/span><\/span><\/span><\/p>\n

 <\/p>\n

————————————————————————————————————————————————————–<\/span><\/strong><\/p>\n

 <\/p>\n

How to check policy compliance for linked users for a one or more Password Policies<\/span><\/span><\/span><\/span><\/em><\/strong><\/p>\n

foreach ($Policy in Get-PasswordPolicy [<Name>]) { foreach ($Applied in $Policy.AppliesTo) { Get-PasswordPo<\/span><\/span><\/span>licyEffective $Applied } }<\/span><\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Build: FGPP RTM_2300-20081223.0 Branch: FGPP-RTM-branch. Usage: Production Usage.   General Information   This build is the final RTM build of the Fine Grain Password Policy Tool. (FGPP RTM_2300-20081223.0) For full release notes see the document \u201cRelease notes for Fine Grain Password Policy Tool\u201d included in the package, as well to be released on the website … <\/p>\n

Continue reading “Fine Grain Password Policy Tool 1.0 (2300.0) RTM”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[1],"tags":[6,8],"class_list":["post-52","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-active-directory","tag-fine-grain-password-policy-tool"],"_links":{"self":[{"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=\/wp\/v2\/posts\/52","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=52"}],"version-history":[{"count":0,"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=\/wp\/v2\/posts\/52\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=52"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=52"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=52"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}