tailieunhanh - Windows Admin Scripting Little Black Book- P19

Windows Admin Scripting Little Black Book- P19:This book may not be duplicated in any way without the express written consent of the publisher, except in the form of brief excerpts or quotations for the purposes of review. The information contained herein is for the personal use of the reader and may not be incorporated in any commercial programs, other books, databases, or any kind of software without written consent of the publisher. Making copies of this book or any portion for any purpose other than your own is a violation of United States copyright laws | Here scriptfile is the full path and file name of a script file that contains the following On Error Resume Next Set objDomain GetObject WinNT Domain MinPasswordAge Min 60 60 24 MaxPasswordAge Max 60 60 24 Here domain is the name of the domain min is the minimum duration in days before a user can change his or her password and max is the maximum duration in days a password is valid. The formula 60x60x24 is the calculation from seconds to days 60 seconds x 60 minutes x 24 hours . Setting Unique Password Changes For maximum security you should implement a policy to force users to select passwords different from their previous passwords. To set the unique password duration for the domain using ADSI proceed as follows 1. Create a new directory to store all files included in this example. 2. Download and install the latest version of ADSI and Windows Script Host from to the new directory. 3. Select Start Run and enter cscript . Here scriptfile is the full path and file name of a script file that contains the following On Error Resume Next Set objDomain GetObject WinNT Domain PasswordHistoryLength min Here domain is the name of the domain and min is the minimum number of passwords used before a user can repeat that previous password. The formula 60x60x24 is the calculation from seconds to days 60 seconds x 60 minutes x 24 hours . Setting the Account Lockout Policy For maximum security you should implement a policy to lock out accounts after a certain number of bad attempts. To implement an account lockout policy using ADSI proceed as follows 1. Create a new directory to store all files included in this example. 2. Download and install the latest version of ADSI and Windows Script Host from to the new directory. 3. Select Start Run and enter cscript . Here scriptfile is the full path and file name of a script file that contains .