📚 Detailed Course: Modifying the Password Policy in Active Directory with PowerShell

In this course, we will learn how to use PowerShell to modify the default password policy in Active Directory (AD) with the Set-ADDefaultDomainPasswordPolicy command. This command lets you configure password security settings in the domain, such as complexity, lockout duration, and maximum password age.

---

✨ Command Summary

# 🔐 Retrieves the domain's default password policy
Get-ADDefaultDomainPasswordPolicy

# ✏️ Modifies the password policy to disable complexity, set a lockout duration of 45 minutes, and set a maximum age of 30 days
Set-ADDefaultDomainPasswordPolicy -Identity lab.lan -ComplexityEnabled $false -LockoutDuration 00:45:00 -MaxPasswordAge 30.00:00:00

# 🔄 Verifies the password policy after the change
Get-ADDefaultDomainPasswordPolicy

# ✅ Checks whether password complexity meets the requirements, and offers to bring it into compliance if necessary
$MDPComplexe = $true
$StrategieMDP = Get-ADDefaultDomainPasswordPolicy -Identity lab.lan

if($StrategieMDP.ComplexityEnabled -eq $MDPComplexe) {
   Write-Host "La stratégie de mot de passe répond aux exigences de complexité" -ForegroundColor Green
} else {
   Write-Host "La stratégie de mot de passe ne répond pas aux exigences de complexité." -ForegroundColor Red
   Write-Host "Souhaitez-vous mettre en conformité l'exigence de complexité (O/N) ? " -ForegroundColor Green -NoNewline
   $Reponse = Read-Host
   if($Reponse -eq "O") {
      Set-ADDefaultDomainPasswordPolicy -Identity lab.lan -ComplexityEnabled $true
      Write-Host "La stratégie de mot de passe a été mise en conformité."
   } elseif($Reponse -eq "N") {
      Write-Host "La stratégie de mot de passe n'a pas été modifiée."
   }
}