preview

Nt1330 Lab 1

Decent Essays

1. Goal In this lab, many more options were explored with Windows servers. The topics covered were Group Policies and Password Settings Objects. Both of these features of Windows Active Directory allow for very granular settings to be set across the network. These include a wide range of settings that one most likely would not even think of. I have personally worked with both Active Directory and Group Policies quite extensively so neither of these were new topics for me to learn. However, I had never worked with Password Setting Objects before so that was a learning experience. All of these features are useful in any enterprise production network and are highly valuable skills to have. 2. Procedure All information relating to the creation …show more content…

The first was a Default PSO with a precedence of 100 to apply to any user that didn’t fall into the other two PSOs that I had created. This PSO establishes some minimum security requirements such as a minimum password length of seven characters and a maximum password age of 365 days. The next policy is the Group PSO with a precedence of 50. This is more strict with a minimum password length of eight and max password history of 270 days. This was applied to the “SGC Users” group which is the group that all users are a member of. This means that the Default PSO should never actually be applied. Finally, the PSO with the precedence of 25 is the Admin PSO. This is applied to all administrators of the Stargate.SGC domain. It has a minimum password length of 10 and a maximum password age of 180. In addition to the other PSOs, it also enforces complexity requirements and has a lockout policy. The lockout policy will lock a user out for 30 minutes after three failed attempts. All of these settings are to make it much harder for any password to be cracked. Even if someone did manage to crack the password it would take a very long time because they could only try three different passwords then would have to wait another 30 minutes before trying

Get Access