Setting several password requirements vi a REG import file

[Coram Daes]

I read the tutorial: http://www.sevenforums.com/tutorials/73368-password-history-enforcement-enable-disable.html and in that same page there are several related tutorial's for password management.

Looking for a REG import that would set:
- pwd min char = 12
- pwd max age = 90 days
- pwd complexity = yes
- pwd unique = 12 (a year)
-

I know these settings are here
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SeCEdit\Reg Values and I also know that one can do it via secpol.msc or via cmd, as Brink wrote in the Tutorial, but I am after the REG import way to do it, since it would be the quickest way for my environment.

I assume I could export the REG key from a machine that has been set up that way, but would it work with all machines? I have W7P and W7U and W S 2012 to consider. (No I am not yet implementing it as GP since I am still messing with AD construction).

 

[Alejandro85]

Never tried it, but it should work right away, no matter the edition. All Windows edition are in fact the very same thing, just with certain features hidden, but the registry is the same. I'm not 100% sure about Server 2012 (since it's really a Windows 8), but it may be as well work. Have a look at eightforums for that one.

 

[Coram Daes]

What should work right away?
Making an export of the key from a comp that has it and then import it on a comp that has not?

 

[Alejandro85]

Yes, it's just changing a registry value after all, via a reg file instead of manually. I don't see why it would fail.

 

[Ztruker]

Where are these in the registry though. The screen shot shows the secpol window. The names as shown do not appear in the registry. I scanned the registry for Enforce password history and it was not found.

I did find these though: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Netlogon\Parameters

 

[Ztruker]

Migtht be easier to run a batch file from an elevated command prompt with a line like this in it:

net accounts /UNIQUEPW:12 /MAXPWAGE:90 /MINPWLEN:12 /MINPWAGE:0