Skip to main content

Connect to a Configuration

Password Policy Enforcer's configuration settings are stored in Active Directory or the registry. An Active Directory configuration is called a domain configuration, and it defines the password policies for domain user accounts. A registry configuration is called a local configuration, and it defines the password policies for local user accounts.

Connecting to a Domain Configuration​

A domain configuration exists on every domain controller. Changes to the configuration replicate to all the domain controllers in the domain, so you only need to configure one domain controller in each domain. If you are using Password Policy Enforcer in more than one domain, then you will need to configure each domain separately.

Follow the steps below to connect to a domain configuration.

Step 1 – Click the Netwrix Password Policy Enforcer item to display the Password Policy Enforcer view.

Step 2 – Click Connect To in the right pane of the management console.

Step 3 – Select the Domain option.

Step 4 – Enter the name or IP address of a domain controller, then click OK.

NOTE: You cannot make changes to the Password Policy Enforcer configuration while the management console is connected to a read-only domain controller.

Connecting to a Local Configuration​

A local configuration is used by only one computer, so it does not replicate to any other computers. You can copy a local configuration to another computer by exporting the configuration from the registry, and then importing it into the registry of the other computer. You can also use Group Policy to distribute a local configuration to many computers. See the Domain and Local Policies topic for additional information.

Follow the steps below to connect to a computer's local configuration.

Step 1 – Click the Netwrix Password Policy Enforcer item to display the Password Policy Enforcer view.

Step 2 – Click Connect To in the right pane of the management console.

Step 3 – Select the Local option, then click OK.

NOTE: Domain configurations are stored in the CN=Password Policy Enforcer 10.0,CN=System object.

NOTE: Local configurations are stored in the HKLM\SOFTWARE\ANIXIS\Password Policy Enforcer 10.0
registry key.

NOTE: Users with write permission to these objects can configure Password Policy Enforcer.