> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/search-and-reports/active-directory-entities/fgpp.md).

# FGPP

| Field                                   | Type    | Possible Operators                                             | Description                                                                                                                                                                          |
| --------------------------------------- | ------- | -------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Guid                                    | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A unique identifier that is a combination of GUID of selected `Scan` and Active Directory `ObjectGUID` of the object.                                                                |
| FSName                                  | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A special unique identifier that is a combination of the `Name of the object` and the `Fully Qualified Domain Name of the Domain`                                                    |
| Name                                    | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Name of the specified object. (**Ldap Display Name**: ou)                                                                                                                            |
| DistinguishedName                       | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Active Directory distinguished name of the object. (**Ldap Display Name**: distinguishedName)                                                                                        |
| msDSMaximumPasswordAge                  | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Defines the maximum number of days a user password remains valid before it must be changed.                                                                                          |
| msDSPasswordSettingsPrecedence          | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Specifies the precedence of the password policy. Lower numbers have higher priority.                                                                                                 |
| msDSPasswordReversibleEncryptionEnabled | BOOLEAN | N/A (toggle)                                                   | Specifies whether reversible encryption is enabled for user passwords.                                                                                                               |
| MinimumPasswordAge                      | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Specifies the minimum number of days a user must wait before changing their password again.                                                                                          |
| msDSPasswordComplexityEnabled           | BOOLEAN | N/A (toggle)                                                   | The status of password complexity requirements for user accounts.                                                                                                                    |
| msDSLockoutObservationWindow            | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Specifies the time window (in minutes) during which failed logon attempts are counted before account lockout.                                                                        |
| msDSPasswordHistoryLength               | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Specifies the number of previous passwords remembered to prevent reuse by the user.                                                                                                  |
| msDSLockoutThreshold                    | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Specifies the number of failed logon attempts allowed before the user account is locked out.                                                                                         |
| msDSLockoutDuration                     | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Specifies the duration (in minutes) that a user account remains locked after reaching the lockout threshold.                                                                         |
| msDSMinimumPasswordLength               | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Specifies the minimum number of characters required in a user password.                                                                                                              |
| IsWeak                                  | BOOLEAN | N/A (toggle)                                                   | Shows whether the password policy settings are considered insecure, based on factors like short passwords, lack of complexity, absence of account lockout, or reversible encryption. |
| Tier                                    | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Tier level Forestall assigned to the object: `0` (Tier 0), `1` (Tier 1) or `2` (Tier 2). Lower is more privileged.                                                                   |