Knowledge Base

The configuration is stored in Group Policy and Active Directory, so there is nothing needed to back up before walking through the upgrade process. How do I upgrade password policy steps are as below: 1.Navigate to https://specopssoft.com/support/en/password-policy/download.htm and download the file. 2. Save and Run the Setup Assistant locally to a machine where you administer...

In this article we will review what to check if users are not receiving password expiration reminder emails from Specops Password Policy. Password Expiration is handled exclusively by the Password Policy Sentinel installed on the domain controller holding the PDC Emulator role. If you are unsure which domain controller currently holds the PDC Emulator role,...

*This article is for 7.14 and higher* Often questions arise regarding Specops and password expiration. Below are the steps that can be followed to verify if Specops caused a password to expire. Checking the Periodic Scanning tab This tab provides counts of users affected by Specops Password Policy, along with license information, password expiration, users...

The Specops Arbiter service uses a self-signed certificate to encrypt communications from domain controllers to query the Specops API. If this certificate is expired or inadvertently deleted, the Arbiter server may not be able to start. Identify the Certificate Currently In Use The Arbiter uses the certificate identified by the thumbprint stored in the registry:...

This article applies to uReset when used in a multi-domain environment. When using uReset and Password Policy in multiple trusted domains/forests, you may find that users accessing uReset from domains other than the Gatekeeper domain do not see the Password Policy rules when setting their new password. When this occurs, you will find event ID...

*This article applies to version 7.10 and later* Please note this article applies to the latest version of Password Policy. When viewing Password Policy license usage in Password Policy Domain Administration, admins may encounter the following error: As the error indicates, the Sentinel on the domain controller holding the PDC Emulator role is responsible for...

All password changes in Active Directory passes through one or more Password Filters on the Domain Controllers (Specops Password Policy Sentinel is basically a Password Filter), all these Password Filters need to approve the new password before the change is finalized, like the following flowchart shows. Following this somewhat simplified chart yield some important information:...

Specops Password Policy (and all 3rd party password filters in Active Directory) do not and cannot replace the built-in password policy in Active Directory. For all password changes/resets, Active Directory will check its own built-in policy and ensure the new password meets its requirements before even checking the Specops policy requirements. Active Directory also continues...

With the retirement of Server 2016, a question that has risen in popularity is how I migrate my password policy to another server to continue using the product without any issues? The simple answer is not a lot needs to be done since all of the configuration is stored in Group Policy and Active Directory....

In this article we will review how the Specops client and Specops Password Policy determine the language to use when displaying feedback to the end user when their password is not accepted. There are two ways the language for the feedback is chosen; either set manually in the Password Policy Group Policy Snap-In, or chosen...