Module3 管理用户和服务帐户.pdfVIP

® Microsoft Official Course Module 3 管理用户和服务帐户 刘道军老师主讲 如有疑问请与我联系 Module Overview •Configuring Password Policy and User Account Lockout Settings •Configuring Managed Service Accounts Lesson 1: Configuring Password Policy and User Account Lockout Settings •User Account Policies •Kerberos Policies •Configuring User Account Policies •What Are Password Settings Objects? •Configuring PSOs •Demonstration: Configuring PSOs •Discussion: Planning Password Policies User Account Policies Use the following settings to set password requirements: • Enforce password history • Maximum password age • Minimum password age • Minimum password length • Password complexity requirements •Account lockout duration •Account lockout threshold Kerberos Policies • Kerberos policy settings determine timing for Kerberos tickets and other events Setting Default Enforce user logon restrictions Enabled Maximum lifetime for service ticket 600 minutes Maximum lifetime for user ticket 10 hours Maximum lifetime for user ticket renewal 7 days Maximum tolerance for computer clock 5 minutes synchronization • Kerberos claims and compound authentication for DAC requires Windows Server 2012 domain controllers Configuring User Account Policies •Local Security Policy account settings: • Configured with secpol.msc • Apply to local user accounts •Group Policy account settings • Configured with the Group Policy Management console • Apply to all accounts in AD DS and local accounts on computers joined to the domain • Can only be applied once, in Default Domain Policy • Take precedence over Local Security Policy set