Our dedicated Product Specialist team is always ready to help you when you need it the most.
Contact Support
Specops Password Policy
How do I create multiple policies for Password Policy for different user groups?
For the initial policy Create your policy you will use for this policy and tag the policy where you would like it applied within the Active Directory structure. The security filtering will be Authenticated users which for most cases is fine: For an additional policy Create your policy you will use for this policy and...
Sentinel status “Unreachable” or “Unknown”
Make sure that standard communication is allowed. The management Computer with the Specops Password Policy Domain Administration Tool installed must be able to communicate with Domain Controllers on: LDAP: TCP 389 SMB: TCP 445 Kerberos: TCP 88, 464 DNS: TCP/UDP 53 Other common client protocols RPC (Remote Procedure Call) RPC should be open/allowed between the...
Verify Sentinel Installation State
This article will review the steps required to confirm the Specops Password Policy Sentinel is installed properly on your domain controllers. The Sentinel is required on every writeable domain controller in order to ensure proper enforcement of Specops password policies. It does not need to be installed on read-only domain controllers; if you have any...
How do I deny a group from receiving my Specops Password Policy
This is useful if you are applying it to a wide scope of a domain, but rather than exclude an OU, you can choose to exclude by a Security group. If you have a security group in mind you can use that one or create one in Active Directory Users and Computes. You will then...
Specops Password Policy Sentinel Components
This article lists all file locations and executables associated with the Specops Password Policy Sentinel on domain controllers. File Locations The following locations contain files associated with the Sentinel: %PROGRAMFILES%\Specopsssoft\Specops Password Policy\ %WINDIR%\System32\SppFilter.dll %WINDIR%\System32\SppFilterInfo.json %WINDIR%\System32\SppFilterRes.dll Executables Specops Password Sentinel Service — Windows service, must run as local system. C:\Program Files\Specopssoft\Specops Password Policy\Sentinel Service\Specopssoft.SentinelService.exe Specops Password...
Breached Password Protection Complete scanning. The number of Email notifications sent are less then compromised passwords found.
After a Breached Password Protection Complete scanning the results are showing less email notifications sent then compromised passwords found. Possible reasons for this 1. A users password has been caught as breached by the complete list in the past and the “User must change password during next logon” setting has been ticked on the user...
The installed license does not include support for Breached Password Complete Continuous Scan
This may happen when you upgrade from an older version to 7.11 and import the new Continuous Scan license file. To fix: Launch Active Directory Users and Computers and ensure these 2 options are checked: Then navigate under the System>Specops>Password Policy folder and delete the licensing folder: From there, launch Specops Password Policy domain administration...
Password Policy Firewall Ports
Here are the internal ports for Password Policy: and ports for Breached Password Protection: https://specopssoft.com/support/password-policy/reference-material/configure-allowlist