I’m enjoying a short X-mas holiday at the moment and thought this would be a great moment to spend some time really digging in with Win8 Developer Preview.
As this is still a very early stage of software I can tell you it’s still quite buggy but never the less I’m enjoying it and have found some really cool things. One I’m very excited about and want to share with you is the new ADAC Active Directory Administrative Center and the build in fine grained password solution.
As soon as you install you first win8 DC you will be greeted with the Green Field metro interface containing the AD tools you would expect (Note that DNS will be missing from a vanilla install, you need to add the RSAT DNS tool feature as the MMC does not install by default, I hope they categorize this as a bug).
The ADAC is now installed by default in win8
You need to turn a blind eye to the logo’s as a lot in win8 is still pretending to be win2008 R2
The tool itself is still very familiar and unchanged and in essence you are still doing what you use to do in it except when you drill down the AD tree > system > password Settings Container and right click
you now see your Password Settings option.
Click that and the fine grained password policy dialog opens up.
Set the values according to your needs and don’t’ forget the function of
Precedence (msDS-PasswordSettingsPrecedence). This is an integer value that is used to resolve conflicts if multiple PSOs are applied to a user or group object.
you can, as before target you PW policy to the user level or a group of users
If you now head down to the User properties, double click the user
choose the Password settings tab you will see the affective policy.
you can also right click the user object and select view resultant password settings
Just to be sure this all worked I tried it out and sure enough this is working just as expected.
In the end the interface is still doing what we used to do directly in ADSI Edit but the new interface makes this all just so much easier.
Now let’s hope I can get some of the other great new win8 stuff to work so I can share even more experiences on my blog.