I probably wouldn't use registry, since it feels hackish. If it is a domain joined pc I would use group policy and can support fine grain pw policies. No puppet required.
If its a workgroup pc or you want to manage it locally instead of gpo: On reference computer------------------------------1. Click Start -> Run, type “secpol.msc”, to open the Security Policy tool. 2. Configure the Password Policy as required. 3. Right click “Security Settings”, and click “Export Policy…” to export the settings to a .inf file. 4. Copy the .inf file to files folder of your module 5. Deploy inf file via file resource or use file function on command. 6. Exec resource the following command to import the policy file: Secedit /configure /db secedit.sdb /cfg <exported.inf file> -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users. For more options, visit https://groups.google.com/groups/opt_out.
