DSCResources/MSFT_ADDomainDefaultPasswordPolicy/en-US/about_ADDomainDefaultPasswordPolicy.help.txt
|
.NAME
ADDomainDefaultPasswordPolicy .DESCRIPTION The ADDomainDefaultPasswordPolicy DSC resource will manage an Active Directory domain's default password policy. ## Requirements * Target machine must be running Windows Server 2008 R2 or later. .PARAMETER DomainName Key - String Name of the domain to which the password policy will be applied. .PARAMETER ComplexityEnabled Write - Boolean Whether password complexity is enabled for the default password policy. .PARAMETER LockoutDuration Write - UInt32 Length of time that an account is locked after the number of failed login attempts (minutes). .PARAMETER LockoutObservationWindow Write - UInt32 Maximum time between two unsuccessful login attempts before the counter is reset to 0 (minutes). .PARAMETER LockoutThreshold Write - UInt32 Number of unsuccessful login attempts that are permitted before an account is locked out. .PARAMETER MinPasswordAge Write - UInt32 Minimum length of time that you can have the same password (minutes). .PARAMETER MaxPasswordAge Write - UInt32 Maximum length of time that you can have the same password (minutes). .PARAMETER MinPasswordLength Write - UInt32 Minimum number of characters that a password must contain. .PARAMETER PasswordHistoryCount Write - UInt32 Number of previous passwords to remember. .PARAMETER ReversibleEncryptionEnabled Write - Boolean Whether the directory must store passwords using reversible encryption. .PARAMETER DomainController Write - String Active Directory domain controller to enact the change upon. .PARAMETER Credential Write - PSCredential Credentials used to access the domain. .EXAMPLE 1 This configuration will set an Active Directory domain's default password policy to set the minimum password length and complexity. Configuration ADDomainDefaultPasswordPolicy_ConfigureDefaultPasswordPolicy_Config { Param ( [Parameter(Mandatory = $true)] [System.String] $DomainName, [Parameter(Mandatory = $true)] [System.Boolean] $ComplexityEnabled, [Parameter(Mandatory = $true)] [System.Int32] $MinPasswordLength ) Import-DscResource -Module ActiveDirectoryDsc Node localhost { ADDomainDefaultPasswordPolicy 'DefaultPasswordPolicy' { DomainName = $DomainName ComplexityEnabled = $ComplexityEnabled MinPasswordLength = $MinPasswordLength } } } |