Explanation/Reference:
Explanation:
In Windows Server 2008, you can use fine-grained password policies to specify multiple password policies and apply different password restrictions and account lockout policies to different sets of users within a single domain. For example, to increase the security of privileged accounts, you can apply stricter settings to the privileged accounts and then apply less strict settings to the accounts of other users. Or in some cases, you may want to apply a special password policy for accounts whose passwords are synchronized with other data sources.
This is found in the Active Directory Administrative Center. You can use Active Directory Administrative Center to perform the following Active Directory administrative tasks:
Create new user accounts or manage existing user accounts

Create new groups or manage existing groups

Create new computer accounts or manage existing computer accounts

Create new organizational units (OUs) and containers or manage existing OUs

Connect to one or several domains or domain controllers in the same instance of Active Directory

Administrative Center, and view or manage the directory information for those domains or domain controllers Filter Active Directory data by using query-building search

Reference: http://technet.microsoft.com/en-us/library/cc770842(v=ws.10).aspx