Your network contains an Active Directory domain named contoso.com.
You need to create one password policy for administrators and another password policy for
all other users.
Which tool should you use?
A.
Group Policy Management Editor
B.
Group Policy Management Console (GPMC)
C.
Authorization Manager
D.
Ldifde
Explanation:
http://technet.microsoft.com/en-US/library/cc754461.aspx
Creating a PSO using ldifde
You can use the ldifde command as a scriptable alternative for creating PSOs.
To create a PSO using ldifde
1. Define the settings of a new PSO by saving the following sample code as a file, for
example, pso.ldf: dn: CN=PSO1, CN=Password Settings
Container,CN=System,DC=dc1,DC=contoso,DC=com changetype: add objectClass: msDSPasswordSettings
msDS-MaximumPasswordAge:-1728000000000
msDS-MinimumPasswordAge:-864000000000
msDS-MinimumPasswordLength:8
msDS-PasswordHistoryLength:24
msDS-PasswordComplexityEnabled:TRUE
msDS-PasswordReversibleEncryptionEnabled:FALSE
msDS-LockoutObservationWindow:-18000000000
msDS-LockoutDuration:-18000000000
msDS-LockoutThreshold:0
msDS-PasswordSettingsPrecedence:20
msDS-PSOAppliesTo:CN=user1,CN=Users,DC=dc1,DC=contoso,DC=com
2. Open a command prompt. To open a command prompt, click Start, click Run, type cmd,
and then click OK.
3. Type the following command, and then press ENTER:
ldifde –i –f pso.ldf