Specops Password Policy

Specops Password Policy extends Active Directory password policy management through Group Policy. Administrators can configure password and passphrase rules, use dictionaries to prevent selected passwords, and configure Specops Breached Password Protection. Use this guide to evaluate the deployment requirements or find instructions for an existing installation.

Plan your deployment

Start with the system requirements and component overview. The deployment includes Administration Tools for managing policies and the Specops Password Policy Sentinel on all writable domain controllers. The Specops Client provides password policy feedback to users. The Specops Password Arbiter connects the Sentinel Service to the Breached Password Protection Cloud API when that capability is used.

Follow the installation procedure when you are ready to deploy. For an existing environment, check the upgrade instructions and release notes.

Understand breached password checks

The Breached Password Protection guide explains Express and Complete checks, when each check happens, and how Continuous Scan and grace periods affect password changes. Review these differences before selecting the settings for your environment.

Configure and manage policies

• Configure password policy settings, including password rules and passphrases.
• Configure the Specops Client through its administrative template.
• Review password policy reports to understand the information available to administrators.

Evaluating the product? Explore Specops Password Policy features and evaluation options.