In which he also complaints that big vendors – Microsoft in this case – are sometimes releasing features – like BitLocker or fine-grained password policies – without fully providing sufficient management tools to actually use them. Needless to say this is very much inline with what I am thinking on the need for do-it-yourself administrative consoles.
Tyson concludes by the following:
My reply to my co-worker was to use either the PasswordSettingsObject cmdlets from Quest or the PowerGUI snap-in which uses those cmdlets – http://powergui.org/entry.jspa?externalID=882&categoryID=46.
I’ve also previously blogged about both the cmdlets and the UI:
- Manage Fine-Grained Password Policies with PowerShell
- Free UI Console for Fine-Grained Password Policies