ANIXIS Web Site

Configuring the PPC

The Password Policy Client is self-configuring and generally does not require manual configuration. You may need to manually configure the PPC if:

You want to enable or disable the PPC without uninstalling it.
Users report that the Change Password dialog is not displayed correctly.
The PPC displays policy messages in the wrong language.
The default communication settings are not suitable (for example, if you change the default PPS Port).

You must install an Active Directory administrative template to configure the PPC. The administrative template only has to be installed once. To install the PPC administrative template:

Use the Group Policy Management Console, or Active Directory Users and Computers Console to display the GPOs linked at the domain level.
Right-click the Password Policy Client GPO, and then click Edit. You need to create the GPO if you installed the PPC manually.
Expand the Computer Configuration item.
Expand the Policies item if it is visible.
Right-click the Administrative Templates item, and then click Add/Remove Templates...
Click Add... and then browse to the PPE installation folder \Program Files\Password Policy Enforcer\ or \Program Files (x86)\Password Policy Enforcer\ on Windows x64.
Select PPEClt.adm, and then click Open.



Click Close.

To configure the Password Policy Client:

Use the Group Policy Management Console, or Active Directory Users and Computers Console to display the GPOs linked at the domain level.
Right-click the Password Policy Client GPO, and then click Edit.
Expand the Computer Configuration, Policies (Server 2008 only), Administrative Templates, Classic Administrative Templates (Server 2008 only), Password Policy Enforcer, and Password Policy Client items.



Double-click one of the items in the right pane of the Group Policy Object Editor, and then configure the available properties. Click the Explain tab for more information about each property.



Click OK.
Close the Group Policy Object Editor.

The new PPC configuration is applied to all computers in the domain. This does not happen immediately, as Windows takes some time to apply the changes to Group Policy. You can force an immediate refresh of Group Policy on the local computer with the following command:

Windows 2000: secedit /refreshpolicy machine_policy

Windows XP and later: gpupdate /target:computer