Skip to main content
AD Academy
Back to all events
4739Security (DC)GPO & policyCRITLast updated:

Domain policy was changed

What it means

A domain-wide policy change: password length, lockout policy, password age. It affects everyone.

First steps

  1. 1Review what actually changed (Default Domain Policy).
  2. 2Weakened password requirements without approval is a red flag.
  3. 3Restore from a GPO backup if the change was not approved.

Related events

This reference is a starting point for investigation, not a replacement for your organisation's security policy.