A corporate network includes a single Active Directory Domain Services (AD DS) domain.
The HR department has a dedicated organizational unit (OU) named HR. The HR OU has two sub-OUs: HR Users and HR Computers. User accounts for the HR department reside in the HR Users OU. Computer accounts for the HR department reside in the HR Computers OU. All HR department employees belong to a security group named HR Employees. All HR department computers belong to a security group named HR PCs.
Company policy requires that passwords are a minimum of 6 characters.
You need to ensure that, the next time HR department employees change their passwords, the passwords are required to have at least 8 characters. The password length requirement should not change for employees of any other department.
What should you do?
A.
Modify the password policy in the GPO that is applied to the domain.
B.
Create a new GPO, with the necessary password policy, and link it to the HR Users OU.
C.
Create a fine-grained password policy and apply it to the HR Users OU.
D.
Modify the password policy in the GPO that is applied to the domain controllers OU.
Create a fine-grained password policy and apply it to the HR Employees group as you cannot apply fine-grained password policy to OU.
I agree… answer should be B, shouldn’t?
There is no correct answer here. PSO’s can only be applied to groups, not OU’s.