Entra ID domain services Fine grained password policy not applying to Entra ID users

Question

Setup:

I've set up Entra ID domain services in our cloud only environment, created a VM and domain joined it to the domain services then synced few users from Entra ID then using those user credential i'm able to log in to the domain join VM and use administrative tools to change setting add users and so on.

I've create a fine grained password policy with precedents lower then default policy and apply it to domain users group and directly to the user.

Issue:

When i go to Entra ID cloud and reset users passwords, they go create a new password but the FGPP setting are not applying.

Question:

How do i configure password policy in Entra ID domain services to apply to Entra ID cloud only users that are synced to domain services?

Answer 1

@Kastytis Balciunas Thank you for reaching out to us, As I understand you are trying to configure password policy in Entra ID domain services to apply to Entra ID cloud only users that are synced to domain services.

As far I understand and as per this doc - https://learn.microsoft.com/en-us/entra/identity/domain-services/password-policy A default fine grained password policy is created within Entra ID Domain Services and applied to all users in a Domain Services managed domain, not for the users synced from Entra ID to Entra Domain Services.

If in case you want to have better password protection for the cloud users, refer to this - https://learn.microsoft.com/en-us/entra/identity/authentication/concept-password-ban-bad

Let me know if you have any further questions, feel free to post back.