I spent most of the day today using the password policy cmdlets and the PowerShell UI we all use and love to create graphical user interface for fine-grained password policies (see overviews in 4sysops and Ulf’s blog) in my Windows 2008 lab. And here’s the result (click to see it full size):
What you see on the screen is the graphical user interface to manage those granular password policies and they are far nicer than ADSIEdit. 
I included the following functionality:
- Create new password policy,
- See password policy properties (PowerGUI adds sorting, filtering, reporting, copy to clipboard and other goodies),
- Link a password policy to a user or group,
- Unlink a password policy,
- Remove a password policy,
- See the resultant policy for a selected user.
All these operations also support bulk selection.
You can download the pack from PowerGUI library: Fine-Grained Password Policies - please provide feedback so I can make it better.
And, as usual, should you want to learn the command-line or script the same actions, just click the PowerShell Code tab at the bottom of the PowerGUI window - and copy/paste from there.
Dmitry
Tags: PowerPack, AD cmdlets, Password management, Windows Server 2008, cmdlets, PowerGUI, PowerShell, AD, Policies, UI, Active Directory, Longhorn
Subscribe by email
This appears to be a nice step up from the ADSI Edit feature, but I am still disappointed that Microsoft didn’t provide anyway to adjust the complexity rules, without this it doesn’t allow us to control features defined by Management.