How can I deploy password policy to a specific group?

Dear All,
I would like to deploy password policy to specific OU for testing purpose. As I know password policy only can setup in
Default Domain Policy or new created policy and save at the root of domain. Is there any method for me to test the password policy for specific OU? Thanks.
Frankie

Hi,
As Vivian said, Fine grained password policy cannot be applied directly to an OU.
Instead you can create a global security group in the OU and apply the fine grained password policy.
For example, if you need to apply a password policy for "Sales" OU, you can create a global security named "Sales Users" and assign the Fine grained password policy to this group. Then you can add the users to be tested in the "Sales"
OU as members of this group.
Checkout the below link on the deployment scenario of Fine grained password policy,
http://blogs.technet.com/b/askpfeplat/archive/2013/10/07/fine-grain-password-policy-for-active-directory-2008-domain-does-not-apply.aspx
FYI - To activate the fine grained password policies, you need to raise your domain functional level to Windows Server 2008 or higher.
Regards,
Gopi
www.jijitechnologies.com

Similar Messages

How can I deploy EFS using Group Policy and automatically encrypt computers for ALL users who login?

How can I deploy EFS using Group Policy and Active Directory with a goal to automatically encrypt computers for ALL users who login? (NOT an option for me to use BitLocker)
I was asked to deploy EFS to encrypt the user my documents folder and profile on all of the users laptops. The laptops are in common areas (board meeting rooms, etc) and security of files is a must.
I successfully created a recovery certificate in AD. I created an OU and setup an EFS policy and users can now login and select to encrypt their own files. The issue is that management would like to have automaticy Encrypt ALL users my documents AUTOMATICALLY
when a user login.
Can this be done?
Please help

Hi,
Any update?
Just checking in to see if the suggestions were helpful. Please let us know if you would like further assistance.
Best Regards,
Andy Qi
TechNet Subscriber Support
If you are
TechNet Subscription user and have any feedback on our support quality, please send your feedback
here.
Andy Qi
TechNet Community Support

How can i deploy macbooks and 802.1x authentication using PEAP/MSChap version 2

How can i deploy macbooks and 802.1x authentication for wireless connectivity using PEAP/MSChap version 2. The Cert is generated by a 2008 Windows CA authority. I am trying to get to join but the MAC doesnt seem to want to accecpt the cert. Can i not validate the cert and still have it join the 802.1x wireless netqwotk? The wireless netwotk is using a Cisco 5508 wireless controller and Cisco 1142 access points. All works fine with Windows devices.

Hi Tarik,
Thanks for your answers,
I've attached my configured AuthZ rules and AuthZ profile for provisioning,
I want the process to be the same for iPhone, Android and Windows.
1) Connect to the SSID
2) Login using your AD credentials PEAP-MS-CHAP-v2
3) Redirect to device registration portal (So I can set a limit of 3 devices per employee)
4) As soon as the client click "register" no more redirects and PERMIT-ALL
I think that I don't need to rely on profiling because In terms of AuthZ policies it should be something like this:
1) if WIRELESS802.1x and PEAP-MS-CHAPV2 and BYODREGISTRATION=!YES(Unknown or not reg) then "Redirect to device registration(that is NSP right?)"
2) if WIRELESS802.1x and PEAP-MS-CHAPV2 then PERMIT-ALL(no redirection)
3) everything else = DENY-ALL
But the NSP looks for Client Provisioning policies, so if I don't configure any policy it should Allow Network Access(See attachment photo3.png) but as I said on the post it shows that cannot retrieve the MAC-Address so the client can't register his device and don't have access to the network. (To grant access I've configured provisioning policies, that way the clients can register their devices but they are redirected to google play or are forced to install the profile at iOS and this is what I don't want because it is not necessary)
What screenshoot do you need after the registration? the Auth report?
Thank you very much for your time!

How can i remove password from my I Pod

how can i remove password from my I Pod

If you mean you can't get past the screen lock then:
Place the iOS device in Recovery Mode and then connect to your computer and restore via iTunes. The iPod will be erased.
iOS: Wrong passcode results in red disabled screen
If recovery mode does not work try DFU mode.
How to put iPod touch / iPhone into DFU mode « Karthik's scribblings
For how to restore:
iTunes: Restoring iOS software
To restore from backup see:
iOS: How to back up
If you restore from iCloud backup the apps will be automatically downloaded. If you restore from iTunes backup the apps and music have to be in the iTunes library since synced media like apps and music are not included in the backup of the iOS device that iTunes makes.
You can redownload most iTunes purchases by:
Downloading past purchases from the App Store, iBookstore, and iTunes Store

HT204291 How can I find password to Apple TV? I have forgotten password and need it to activate AirPlay. Thanks!

How can I find password to Apple TV? I have forgotten password and need it to activate AirPlay. Thanks!

Welcome to the Apple community.
Which password is it that you are looking for. If it is your airplay password, simply turn the password off in the airplay settings on the Apple TV and then turn it back on again and enter a new password.

I need to have my macbook pro repaired how can I hide passwords and banking info?

I need to have my macbook pro repaired how can I hide passwords and banking info?

Create a new admin account named repair and only give them the password for that account. Alternately you could back up or clone your system, erase the hard drive and then reinstall OS X with one admin account that has no personal information.

How can i set password for a backup?

::I am using 10g xe
I am gettin gbackup through RMAN, how can i set password for each backup? I want to protect my backup so that no one other could use it if he copies the backup files.
Faheem

Just use "SET ENCRYPTION ON IDENTIFIED BY password ONLY" command in your RMAN scripts. Look at the advanced backup manual for details: http://download-east.oracle.com/docs/cd/B19306_01/backup.102/b14191/rcmbackp006.htm#sthref632
Daniel

How can i deploy adf-richclient-demo.war to tomcat?

how can i deploy adf-richclient-demo.war to tomcat or
how can i use adf faces 11G in tomcat or
how long will the next version out?
thank you!

Hi,
the demo is a WAR file. So if you have a tomcat version that supports JSF 1.2 then you should be able to deploy it like any other JEE WAR file
Frank

How can I save passwords for URL's

How can I save passwords for URL's? I just installed 10.6.7 Snow Leopard. I also had to format my HD drive and reinstall my software.

Hi,
From the Safari menu bar click Safari / Preferences then select the Autofill tab. Select the box next to:
User names and passwords.
Navigate to a site you normally log into with the user name and password. Click Yes when prompted. That will save that information to a new keychain for you.
Passwords are actually stored in your Keychain Access application. (Applications/Utilities)
Carolyn

How can I deploy the WAR application in the Tomcat

How can I deploy the WAR application in the Tomcat. Do I have to do any manifest file.
Thanks
S. Nikov

First of all, which version of Tomcat are you using?
Deploying a WAR file in Tomcat is very easy. Just put the WAR file in the %TOMCAT_HOME%\webapps directory and start Tomcat. It will automatically find the WAR.
Please read the Tomcat documentation: start Tomcat and point your browser to http://localhost:8080
Jesper

How can I deploy VI on cRIO?

Hello all..
How can I deploy VI on cRIO using LabVIEW 8.5... I want to deploy the VI once on cRIO and then run it without computer... I want a stand alone system... I know how to make .exe file from a VI... But I don't know how to deploy VI on cRIO and then launch it without computer.... can anybody please help...?
Thank you for any help from you...

Have a look at the following help page:
Running a Stand-Alone Real-Time Application (RT Module)
Post back if you have any questions.
Adnan Zafar
Certified LabVIEW Architect
Coleman Technologies

How can I deploy jCom moniker Servlet on integration Domain?

Hi All,
I am trying to know, how can I deploy moniker servlet on integration
domain. I know if I run moniker class at console I can see the moniker string.
But, I want to deploy this sevlet in integration domain, unable to find any documentation
or help. Does any one did this in the past?? looking for help...
Thanks,
Gary H.

Yeah, i am able to see the J2EE engine clusters, there the message server port is given as 3601. becoz scs instance number is 1 here. so it is not the problem,
the error it is giving as,
Jun 6, 2005 11:37:28 AM /userOut/deploy (com.sap.ide.eclipse.sdm.threading.DeployThreadManager) [Thread[Deploy Thread,5,main]] ERROR:
[001]Deployment aborted
Settings
SDM host : obtdev9
SDM port : 50018
URL to deploy : file:/C:/DOCUME1/sireesha.b/LOCALS1/Temp/temp56446MyServletEAR.ear
Deployment exception : Server obtdev9 did not accept login request as apiadmin on port 50018 - CmdXmlFactory could not find Top Element within String: "null".
Inner exception was :
Server obtdev9 did not accept login request as apiadmin on port 50018 - CmdXmlFactory could not find Top Element within String: "null".
is this may be the problem with port number?
i am not knowing what is happening here...
if you know the exact error based on the error messgae please help me,
thanks to u for helping in this problem,
Regards,
sireesha.

How can I deploy the Operation find all

Hello together,
I have a big problem.
How can I deploy the operation find all so that I can see it in the WSNavigator.
There I can just see the CRUD operations and if I try to select the operation in the Developer Studio ,when I expose the webservice, the operation is highlighted grey. But if I test the Service I can see the operation and it works.
?????? But why can I test the service with the operation find all and why is it not possible to see the operation in the WSNavigator.
Thank you

Hi Srinivasan;
thanks a lot. I could solve the problem with my <Cars>. I just deleted it. Now I have just a warning - message.
The code looks know like:
@com.sap.caf.dt.CAFOperation(name="GetAllCars")
     public gennari.mhp.types.Ret_Cars GetAllCars() {
          Ret_Cars ret_cars = new Ret_Cars();
          try {
               Collection docList = this.getcarsService().findAll();
               ret_cars.setTest((List) docList);
          } catch (CAFFindException fe) {
          return ret_cars;
But if I try to run the operation as a webservice in the webservice navigator I have following error message:
"com.sap.engine.services.webservices.espbase.server.additions.exceptions.ProcessException "
Is this a problem with my Java AS or is still something in my Application Service responible fort that???
Thats the XML Content:
<?xml version="1.0" encoding="UTF-8"?>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<SOAP-ENV:Body>
    <SOAP-ENV:Fault>
      <faultcode>SOAP-ENV:Server</faultcode>
      <faultstring>com.sap.engine.services.webservices.espbase.server.additions.exceptions.ProcessException</faultstring>
      <detail>
        <yq1:com.sap.engine.services.webservices.espbase.server.additions.exceptions.ProcessException xmlns:yq1="http://sap-j2ee-engine/client-runtime-error">
          
        </yq1:com.sap.engine.services.webservices.espbase.server.additions.exceptions.ProcessException>
      </detail>
    </SOAP-ENV:Fault>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>
Thank you
Regards Marco

Help: How can I deploy my [TP4] Applications in Simple Steps using OC4J 11

deploy apps to OC4J standalone TP4
Hi,
I installed Oracle Continer OC4J 11 and Started OK
but with this warning " J2EE JNDI-00002"
Now : How can I deploy my Application pls in Simple Steps?
is this link below Related to Version [TP4] or what ?
http://www.oracle.com/technology/products/jdev/tips/muench/oc4j11gtp/index.html
thanks
Forakora

Read this thread:
Can Jdeveloper TP4 deploy apps to OC4J standalone TP4

How can I deploy a simple stateless ssion EJB and call it from a standalone client

Hi,
I'm creating s simple staless session EJB that has a method that takes a name and prints "Hello" + name. This EJB is in a package called "com.demos.mydemo.ejbs.hello"
How can I deploy this to OC4J?
How can I call it from a standalone client(no JSP, no servlets)?
In Sun's J2EE is very easy to deploy and I don't have to know any XML stuff.
can I use the .ear file created by the Sun's "deploytool" to deploy my EJB to OC4J?
This is the code at I'm using and it works on Sun's j2sdkee1.2.1:
///////// Remote /////////
package com.demos.mydemo.ejbs.hello;
import java.rmi.RemoteException;
import javax.ejb.EJBObject;
public interface Hello extends EJBObject {
public String sayHello(String name) throws RemoteException;
///////// Home //////////
package com.demos.mydemo.ejbs.hello;
import java.rmi.RemoteException;
import javax.ejb.EJBHome;
import javax.ejb.CreateException;
public interface HelloHome extends EJBHome {
public Hello create() throws CreateException, RemoteException;
/////////// Bean class ///////////
package com.demos.mydemo.ejbs.hello;
import java.rmi.RemoteException;
import javax.ejb.SessionBean;
import javax.ejb.SessionContext;
import javax.ejb.CreateException;
import javax.ejb.EJBException;
import java.sql.Connection;
import java.sql.SQLException;
//import java.sql.PreparedStatement;
import javax.sql.DataSource;
import javax.naming.NamingException;
import javax.naming.InitialContext;
public class HelloEJB implements SessionBean {
private SessionContext context;
private Connection con;
private String dbName =
"java:comp/env/jdbc/Oracle";
public HelloEJB() {}
public void setSessionContext (SessionContext context) {
this.context = context;
public void ejbCreate() throws CreateException {
try {
makeConnection();
catch (Exception e) {
System.err.println("HelloEJB: exception in ejbCreate:" + e.getMessage());
e.printStackTrace();
throw new CreateException(e.getMessage());
public void ejbActivate() {
public void ejbPassivate() {
public void ejbRemove() {
try {
con.close();
catch (SQLException ex) {
throw new EJBException("HelloEJB: exception in ejbRemove: " + ex.getMessage());
public String sayHello(String name) {
return "Hello " + name;;
private void makeConnection() throws NamingException, SQLException {
try {
InitialContext ic = new InitialContext();
DataSource ds = (DataSource) ic.lookup(dbName);
con = ds.getConnection();
catch (Exception e) {
System.err.println("HelloEJB: exception in makeConnection:" + e.getMessage() );
e.printStackTrace();
//////////// EJB client that uses a stateless session bean
package com.demos.mydemo.ejbs.hello;
import java.io.*;
import java.sql.*;
import javax.sql.*;
import javax.naming.Context;
import javax.naming.InitialContext;
import javax.rmi.PortableRemoteObject;
public class HelloClient {
public static void main(String[] args) {
try {
Context initial = new InitialContext();
Object objref = initial.lookup("HelloSession");
HelloHome home = (HelloHome)PortableRemoteObject.narrow(objref,HelloHome.class);
Hello h = home.create();
String msg = h.sayHello("John Doe");
System.out.println(msg);
//h.remove();
} catch (Exception ex) {
System.err.println("Caught an exception." );
ex.printStackTrace();
Thanks
Nabil
null

<BLOCKQUOTE><font size="1" face="Verdana, Arial, Helvetica">quote:</font><HR>Originally posted by Nabil Khalil ([email protected]):
I deployed and .ear file created by Sun's J2EE deployment tool on the OC4J. It looks that it was deployed fine -- did not get a deployment error.
When I run the client I'm getting the following error: Caught an exception.
javax.naming.CommunicationException: Can't find SerialContextProvider
at com.sun.enterprise.naming.SerialContext.getProvider(SerialContext.java:60)
at com.sun.enterprise.naming.SerialContext.<init>(SerialContext.java:79)
at com.sun.enterprise.naming.SerialInitContextFactory.getInitialContext(SerialInitContextFactory.java:54)
at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:668)
at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:246)
at javax.naming.InitialContext.init(InitialContext.java:222)
at javax.naming.InitialContext.<init>(InitialContext.java:178)
at com.equifax.fms.ejbs.hello.HelloClient.main(HelloClient.java:18)
This makes me think that the client can't see the deployed EJB on the OC4J.
How can I fix this problem?
Thanks
Nabil
<HR></BLOCKQUOTE>
Nabil -
Your standalone client needs to obtain certain server-dependent properties. You can provide them in your code or grab them via a properties file.
For Orion - you need essentially the following setup, filling in your own information...
Define your standalone client class with "main" etc (this is orion specific - should work for 9i AS as well - perhaps there are some differences)
public class SomeClass {
try {
Properties p = new Properties();
p.setProperty("java.naming.factory.initial",
"com.evermind.server.ApplicationClientInitialContextFactory");
p.setProperty("java.naming.security.principal","server_admin_name");
p.setProperty("java.naming.security.credentials","server_password");
// THEN you can get your intitial context reference
InitialContext initial = new InitialContext (p);...........
Then go about your business.....
A good book to get is called "Professional Java Server Programming J2EE Edition" - there happens to be a reasonable amount of Orion/OCJ4 centric information since one of the authors is Karl Avedal - one of the principals behind Orion. Go out to java.sun.com and look at some of the J2EE tutorials - unfortunately a lot of it is hidden behind the J2EE Deployer, but you will get a good sense of what goes into outside-the-container standalone clients.
null

How can I deploy password policy to a specific group?

Similar Messages

Maybe you are looking for