ADFS with Group Policy from AD

Asked Jul 09 '19 at 13:07

Active Jul 21 '20 at 06:39

Viewed 623 times

My question:

Is it possible to enforce Group Policy into Active Directory Federation Service?

I have ADFS, Web application proxy and a web server. I wish to configure it so that a user who logs into the ADFS via the web page can be enforced with a group policy, such as change the user account password when first login, change password after 90 days.

Is this implementation possible?

edited Jul 21 '20 at 06:39

Citizen

1,103
1
10
19

asked Jul 09 '19 at 13:07

xxestter

1

No. Those settings are only enforced by policies that are in the scope of domain controllers where the accounts reside. – Greg Askew Jul 09 '19 at 13:37
I see. May I ask you whether is there such configuration (GPO, account policy) in the ADFS? – xxestter Jul 10 '19 at 00:32
Are these external users or internal domain-joined users? Internal users will be forced to do this when they login to their desktop. – rbrayb Jul 10 '19 at 19:31
@nzpcmad, they are external users. – xxestter Jul 11 '19 at 01:39
Right, so they are not domain-joined - see the first comment. – rbrayb Jul 11 '19 at 18:36

ADFS with Group Policy from AD

0 Answers0