Windows Server ortam\u0131nda, kullan\u0131c\u0131 hesaplar\u0131n\u0131n g\u00fcvenli\u011fini sa\u011flamak i\u00e7in \u015fifre politikalar\u0131 b\u00fcy\u00fck \u00f6nem ta\u015f\u0131r. Group Policy (Grup \u0130lkesi) ve PowerShell kullanarak \u015fifre politikalar\u0131n\u0131 nas\u0131l y\u00f6netebilece\u011finizi, g\u00f6r\u00fcnt\u00fcleyebilece\u011finizi ve d\u00fczenleyebilece\u011finizi bu yaz\u0131da detayl\u0131 bir \u015fekilde ele alaca\u011f\u0131z.<\/p>
1. Group Policy ile \u015eifre Politikalar\u0131 Y\u00f6netimi<\/p>
1.1 Group Policy Management Console'da \u015eifre Politikalar\u0131na Ula\u015fma<\/p>
Group Policy Management Console (GPMC) \u00fczerinden \u015fifre politikalar\u0131n\u0131 y\u00f6netmek i\u00e7in a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 izleyebilirsiniz:<\/p>
1. **Group Policy Management** konsolunu a\u00e7\u0131n.
2. **Forest: domain.com** > **Domains** > **domain.com** > **Default Domain Policy** yolunu takip edin.
3. **Default Domain Policy** \u00fczerine sa\u011f t\u0131klay\u0131p **Edit** se\u00e7ene\u011fini se\u00e7in.
4. **Computer Configuration** > **Policies** > **Windows Settings** > **Security Settings** > **Account Policies** > **Password Policy** yolunu izleyerek \u015fifre politikalar\u0131na ula\u015f\u0131n.<\/p>
1.2 Alternatif Yol<\/p>
1. **Server Manager** > **Tools** > **Group Policy Management** yolunu izleyin.
2. **Default Domain Policy** \u00fczerine sa\u011f t\u0131klay\u0131p **Edit** se\u00e7ene\u011fini se\u00e7in.
3. **Computer Configuration** > **Windows Settings** > **Security Settings** > **Account Policies** > **Password Policy** yolunu izleyin.<\/p>
2. PowerShell ile \u015eifre Politikalar\u0131n\u0131 G\u00f6r\u00fcnt\u00fcleme<\/p>
2.1 Default Domain Policy<\/p>
Varsay\u0131lan domain \u015fifre politikas\u0131n\u0131 g\u00f6r\u00fcnt\u00fclemek i\u00e7in a\u015fa\u011f\u0131daki PowerShell komutlar\u0131n\u0131 kullanabilirsiniz:<\/p>
```powershell
Varsay\u0131lan domain \u015fifre politikas\u0131
Get-ADDefaultDomainPasswordPolicy | Format-List *password*<\/p>
Daha spesifik bilgiler i\u00e7in
Get-ADDefaultDomainPasswordPolicy | Select-Object ComplexityEnabled,
MinPasswordLength,
MaxPasswordAge,
MinPasswordAge,
PasswordHistoryCount
```<\/p>
2.2 Fine-Grained Password Policies (FGPP)<\/p>
Fine-Grained Password Policies (FGPP) ile daha detayl\u0131 \u015fifre politikalar\u0131 olu\u015fturabilirsiniz. FGPP'leri g\u00f6r\u00fcnt\u00fclemek i\u00e7in:<\/p>
```powershell
T\u00fcm FGPP'leri listele
Get-ADFineGrainedPasswordPolicy -Filter * |
Select-Object Name, Precedence, MinPasswordLength, PasswordHistoryCount, ComplexityEnabled<\/p>
Belirli bir FGPP'yi g\u00f6r\u00fcnt\u00fcle
Get-ADFineGrainedPasswordPolicy -Identity \"PolicyName\"
```<\/p>
2.3 Group Policy Objects \u0130\u00e7inde \u015eifre Politikalar\u0131<\/p>
\u015eifre politikalar\u0131 ile ilgili Group Policy Objects (GPO) bulmak i\u00e7in:<\/p>
```powershell
\u015eifre ile ilgili GPO'lar\u0131 bul
Get-GPO -All | Where-Object {$_.DisplayName -like \"*password*\"} |
Select-Object DisplayName, CreationTime, ModificationTime<\/p>
GPO'lar\u0131n uyguland\u0131\u011f\u0131 OU'lar\u0131 g\u00f6r
Get-GPInheritance -Target \"DC=domain,DC=com\"
```<\/p>
3. \u00d6rnek Policy Ayarlar\u0131 ve Anlamlar\u0131<\/p>
Tipik bir \u015fifre politikas\u0131 yap\u0131land\u0131rmas\u0131 a\u015fa\u011f\u0131daki gibi olabilir:<\/p>
```powershell
ComplexityEnabled : True Karma\u015f\u0131kl\u0131k gereksinimleri aktif
MinPasswordLength : 10 Minimum 10 karakter
MaxPasswordAge : 180.00:00:00 180 g\u00fcn sonra de\u011fi\u015fmeli
MinPasswordAge : 5.00:00:00 5 g\u00fcn ge\u00e7meden de\u011fi\u015ftiremez
PasswordHistoryCount : 5 Son 5 \u015fifre tekrar kullan\u0131lamaz
```<\/p>
4. Fine-Grained Password Policy (FGPP) Y\u00f6netimi<\/p>
4.1 FGPP Olu\u015fturma ve D\u00fczenleme<\/p>
FGPP olu\u015fturma ve d\u00fczenleme i\u015flemleri i\u00e7in PowerShell kullanabilirsiniz:<\/p>
```powershell
\u015eifre ge\u00e7mi\u015fini g\u00fcncelleme
Set-ADFineGrainedPasswordPolicy -Identity \"PolicyName\" -PasswordHistoryCount 5<\/p>
Kullan\u0131c\u0131 ekleme
$user = Get-ADUser username | Select-Object DistinguishedName
Set-ADFineGrainedPasswordPolicy -Identity \"PolicyName\" -Add @{AppliesTo=$user.DistinguishedName}
```<\/p>
4.2 FGPP Kontrol<\/p>
FGPP detaylar\u0131n\u0131 ve kullan\u0131c\u0131ya uygulanan politikalar\u0131 kontrol etmek i\u00e7in:<\/p>
```powershell
Policy detaylar\u0131n\u0131 g\u00f6r\u00fcnt\u00fcle
Get-ADFineGrainedPasswordPolicy -Identity \"PolicyName\" | Select-Object PasswordHistoryCount,AppliesTo<\/p>
Kullan\u0131c\u0131ya uygulanan FGPP'yi kontrol et
Get-ADUserResultantPasswordPolicy -Identity \"username\"
```<\/p>
5. Kullan\u0131c\u0131 \u015eifre Durumu Kontrol\u00fc<\/p>
5.1 Son \u015eifre De\u011fi\u015fikli\u011fi<\/p>
Kullan\u0131c\u0131n\u0131n son \u015fifre de\u011fi\u015fikli\u011fi tarihini \u00f6\u011frenmek i\u00e7in:<\/p>
```powershell
Get-ADUser username -Properties PasswordLastSet | Select-Object PasswordLastSet
```<\/p>
5.2 Bir Sonraki \u015eifre De\u011fi\u015fikli\u011fi Tarihi<\/p>
Bir sonraki \u015fifre de\u011fi\u015fikli\u011fi tarihini hesaplamak i\u00e7in:<\/p>
```powershell
$user = Get-ADUser username -Properties PasswordLastSet
$nextPossibleChange = $user.PasswordLastSet.AddDays(5)
Write-Host \"Bir sonraki \u015fifre de\u011fi\u015fikli\u011fi yap\u0131labilecek tarih: $nextPossibleChange\"
```<\/p>
6. RSOP (Resultant Set of Policy)<\/p>
Group Policy sonu\u00e7lar\u0131n\u0131 HTML raporu olarak almak i\u00e7in:<\/p>
```powershell
gpresult \/H \"C:\\PasswordPolicies.html\"
```<\/p>
7. \u0130yi Uygulama \u00d6nerileri<\/p>
7.1 Politika Y\u00f6netimi<\/p>
- Politika de\u011fi\u015fikliklerini test ortam\u0131nda deneyin.
- De\u011fi\u015fiklik \u00f6ncesi mevcut ayarlar\u0131 yedekleyin.
- De\u011fi\u015fiklikleri dok\u00fcmante edin.<\/p>
7.2 G\u00fcvenlik \u00d6nerileri<\/p>
- Minimum \u015fifre uzunlu\u011fu en az 10 karakter olmal\u0131.
- Karma\u015f\u0131kl\u0131k gereksinimleri aktif olmal\u0131.
- Makul bir \u015fifre de\u011fi\u015fim s\u00fcresi belirleyin (\u00f6rn. 180 g\u00fcn).
- \u015eifre ge\u00e7mi\u015fi en az 5 olmal\u0131.<\/p>
7.3 Monitoring<\/p>
- D\u00fczenli olarak politika ayarlar\u0131n\u0131 kontrol edin.
- Kullan\u0131c\u0131 \u015fikayetlerini takip edin.
- Security log'lar\u0131 d\u00fczenli kontrol edin.<\/p>
7.4 Dok\u00fcmantasyon<\/p>
- T\u00fcm politika de\u011fi\u015fikliklerini kaydedin.
- \u00d6zel durumlar\u0131 ve istisnalar\u0131 belgelendirin.
- Troubleshooting ad\u0131mlar\u0131n\u0131 dok\u00fcmante edin.<\/p>
Sonu\u00e7<\/p>
Windows Server ortam\u0131nda Group Policy ve PowerShell kullanarak \u015fifre politikalar\u0131n\u0131 etkili bir \u015fekilde y\u00f6netebilirsiniz. Bu rehber, \u015fifre politikalar\u0131n\u0131 nas\u0131l yap\u0131land\u0131raca\u011f\u0131n\u0131z\u0131, g\u00f6r\u00fcnt\u00fcleyece\u011finizi ve d\u00fczenleyece\u011finizi ad\u0131m ad\u0131m anlatmaktad\u0131r. G\u00fcvenli bir ortam sa\u011flamak i\u00e7in bu politikalar\u0131 d\u00fczenli olarak g\u00f6zden ge\u00e7irmeyi ve g\u00fcncellemeyi unutmay\u0131n.<\/p>","excerpt":"Windows Server ortam\u0131nda, kullan\u0131c\u0131 hesaplar\u0131n\u0131n g\u00fcvenli\u011fini sa\u011flamak i\u00e7in \u015fifre politikalar\u0131 b\u00fcy\u00fck \u00f6nem ta\u015f\u0131r. Group Policy (Grup \u0130lkesi) ve PowerShell kullanarak \u015fifre politikalar\u0131n\u0131 nas\u0131l y\u00f6netebilece\u011finizi, g\u00f6r\u00fcnt\u00fcleyebilece\u011finizi ve d\u00fczenleyebilece\u011finizi bu yaz\u0131da detayl\u0131 bir \u015fekilde ele alaca\u011f\u0131z.","created_at":"2025-01-09 13:41:51","updated_at":"2026-09-23 11:19:35","category_id":6,"view_count":752,"reading_time":4,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-01-09 13:41:51","featured_image":"resimyok.jpg","slug":"windows-server-group-policy-ile-sifre-politikalari-yonetimi","category_name":"Sistem","category_slug":"sistem"}