(Windows 2008 Server: Lesson 3)

{ Configuring a Password GPO Policy }

• What is dcpromo? 
  • It is the Domain Controller Promoter/demoter utility for Microsoft's Active Directory Services. It's function is to change (Promote) a member server into a domain controller or to demote a domain controller to a member server in the active directory.
  • http://technet.microsoft.com/en-us/library/cc732887(WS.10).aspx

   

1. Start your Windows 2008 Server
   • Instructions: 
     1. Click on W2K8 Server
     2. Click on Play virtual machine
   • 

    

2. CRTL + ALT + DELETE
   • Instructions
     1. Virtual Machine
     2. Send Ctrl+Alt+Del
   • 

    

3. Login as Administrator
   • Click on the Administrator icon.
   • 

    

4. Login
   • Command: Provide the password for the Administrator account.
   • 

    

1. Launch Group Policy Management
   • Instructions:
     1. Start --> Administrative Tools --> Group Policy Management
   • 

    

2. Create a New GPO
   • Instructions:
     1. Navigate to Forest:security.student --> Domains --> security.student --> Group Policy Objects.
     2. Highlight Group Policy Objects
     3. Right click on Group Policy Object
     4. Select New
   • 

    

3. Name the New GPO
   • Instructions:
     1. Name it "Password Policy GPO"
     2. Select OK.
   • 

    

4. Edit the Password Policy GPO
   • Instructions:
     1. Right Click on Password Policy GPO
     2. Select Edit
   • 

    

5. Enter Computer Configuration
   • Instructions:
     1. Double click on Computer Configuration
   • 

    

6. Enter Policies
   • Instructions:
     1. Double Click on Policies
   • 

    

7. Enter Windows Settings
   • Instructions:
     1. Double Click on Windows Settings.
   • 

    

8. Enter Security Settings
   • Instruction:
     1. Double Click on Security Settings
   • 

    

9. Enter Account Policies
   • Instruction:
     1. Double Click on Account Policies
   • 

    

10. Enter Account Policies
    • Instruction:
      1. Double Click on Password Policies
    • 

     

11. Edit Minimum password length
    • Instruction:
      1. Double Click on Minimum password length
    • 

     

12. Configure Minimum password length
    • Instruction:
      1. Check the Define this policy setting box.
      2. Place 8 in the "Password must be at least ___ characters" box.
      3. Click OK.
    • 

     

13. Edit "Enforce password history"
    • Instruction:
      1. Double Click on "Enforce password history"
    • 

     

14. Configure "Enforce password history"
    • Instruction:
      1. Check the Define this policy setting box.
      2. Place 4 in the "Keep password history for ___ passwords remembered" box.
      3. Click OK.
    • 

     

15. Edit Maximum password age
    • Instruction:
      1. Double Click on Maximum password age
    • 

     

16. Configure "Maximum password age"
    • Instruction:
      1. Check the Define this policy setting box.
      2. Place 90 in the "Password will expire in: ___ days" box.
      3. Click OK.
      4. You will now see a minimum password age warning.  (Continue to next step).
    • 

     

17. Minimum password age Suggested Value Changes
    • Instruction:
      1. Select OK.
    • 

     

18. Proof of Lab
    • Instruction:
      1. Do a PrtScn of your Password Policy
      2. Cut and Paste into a word document.
      3. Upload to Moodle.
    • 

1. Complete Section 2, Step 8.