None of our PCs are joined to AD.  We have many workstation workgroups and need to deploy tasks to all PCs at a Branch Office regardless of workgroup name.

We need to know if DC and be used to update the local group policy for a PC for the following:

password minimum length = 8

Use Windows password complexity

Password must be changed at least once every 180 days

Password can only be changed once a day.

Remember 4 previous passwords

I did not find a template in DC to do this.

Is this possible and if so how would I go about doing it?

Also,  can DC be used to retrieve the date of the last password change for an account on a PC (or all accounts)  or the number of days left before the password must be changed?  Either would get me the information I am looking for regarding when the password was last changed.

If DC cannot do this, do you have a recommendation for a tool that integrates with DC to do this other than AD?

Looking forward to hearing your solution.

Mike Gerst