Need to setup Password Policy by OU


  • Hello,

    I am trying to setup Password Policy for users by OU on our Windows Server 2012 R2 server. I dont want to play with Default Domain policy?


    Shushanth Gopal

    Tuesday, March 28, 2017 8:45 PM

All replies

  • Hi

     You can configure FGPP for users&group,but not for an OU.check these articles to perform;

    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    Tuesday, March 28, 2017 8:53 PM
  • you cannot setup password policy for users in OU. you can create a global security group  and then assign a Fine grained password policy to apply to that global security group. That is the best method ....
    Tuesday, March 28, 2017 8:56 PM
  • A group whose members are all users residing in an OU is called a shadow group. FGPP can be applied to the shadow group. The membership in the group should be periodically updated, to add users new to the OU, and remove those removed from the OU. I have such a script linked here:

    Richard Mueller - MVP Enterprise Mobility (Identity and Access)

    Tuesday, March 28, 2017 10:59 PM
  • Hi,

    I am checking how the issue is going, if you still have any questions, please feel free to contact us.

    And if the replies as above are helpful, we would appreciate you to mark them as answers, and if you resolve it using your own solution, please share your experience and solution here. It will be greatly helpful to others who have the same question.

    Appreciate for your feedback.

    Best regards,


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact

    Tuesday, April 4, 2017 6:07 AM