← Back to Projects
Business Systems House 2025
Enterprise Password Policy & Fine-Grained Password Settings (FGPP)
Active Directory FGPP Password Policy Account Lockout Thresholds PowerShell AD Administrative Center
Enterprise Password Policy & Fine-Grained Password Settings (FGPP)
Architected differential password complexity baselines by deploying Active Directory Fine-Grained Password Policies to high-privilege account groups.
Key Features & Implementation
- Privileged Account Passphrase Baselines: Enforced mandatory 16-character minimum passphrases and 90-day rotation for Domain Admin accounts.
- Account Lockout Hardening: Configured aggressive account lockout thresholds (5 invalid attempts) to mitigate brute-force password guessing attacks.
- Breached Password Dictionary Checks: Integrated password filter DLLs checking new password attempts against known breached password lists.