Can I set different password policies for different OUs?


Within the Windows 2000 and Windows 2003 Server operating systems, you can only have one password policy for the entire domain. If you need separate password policies, you will have to create separate domains. However, this does change for Windows Server 2008 and 2012 domains. Jeremy covers this idea of “Fine Grained Password Policy” in his book (Chapter 8 in the third edition, with the gear cover) and in his training class.