How do I create multiple policies for Password Policy for different user groups?
For the initial policy
Create your policy you will use for this policy and tag the policy where you would like it applied within the Active Directory structure. The security filtering will be Authenticated users which for most cases is fine:
For an additional policy
Create your policy you will use for this policy and tag the policy where you would like it applied within the Active Directory structure. The security filtering here will be a security group. No additional configuration for this policy is needed within Group Policy:
Go to Group Policy Management Console and go to the scope tab on the policy you wish to modify and highlight authenticated users and select remove:
The following messages will pop up, which is normal as the next steps will correct the issue, so click Ok on both of these messages:
Then add the desired security group:
Then switch to the Delegation Tab and Add Switch to the delegation tab and add authenticated users with read access:
After this, the policy with the security group will need to be adjusted to a higher precedence, since we would want the policy with the security group to apply first and then have the policy with Authenticated Users to apply after.
On the Password Policy Domain Administration tool
Go to the Password Policies tab and click Create new Password Policy:
From here you will be able to create a Group policy based off the policies created previously:
Once you select OK, the next screen will allow you to select from a template or if you are creating your own policy, you would select “custom”:
From here the Password Policy screen will pop up and you will be able to start building out your policy:
You would repeat this for any additional policies.