Practical Exercise – Password Policy

In this practical exercise, you need to prevent users from resetting their accounts by using the same password. The company should not allow users to change their password more than once every three days and these passwords need to be complex. A user must use a minimum of 12 passwords before they can reuse the original password. You need to prevent a hacker from using more than five attempts at guessing a password:

1. On a Windows 10 desktop, type gpedit.msc or, on a domain controller, go to Server Manager | Tools | Group Policy management. Edit the Default Domain Policy field.
2. Under Computer Configurations, expand Windows Settings.
3. Select Security Settings.
4. Select Account Policy, and then select Password Policy.
5. Select Password History and enter 12 passwords remembered. Press OK.
6. Select Minimum Password Age. Enter 3 days, and then press OK.
7. Select Password must meet complexity requirements. Select the radio button...