create a shadow group to support fine-grained password and lockout policies

Hi,

To apply the feature Fine-Grained password and account lockout policies there must be a shadow copy of the membership of the OU, because you can not apply the Fine-Grained policy directly to a OU.

I have read that there is no tool or even a command line to create and maintain the membership of the shadow group update.

The solution might be create a VBScript or some script. How about PowerShell script? Someone who has already done?



Thanks in advance