> For the complete documentation index, see [llms.txt](https://docs.forestall.io/fsprotect/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/fgpp.md).

# FGPP

| Field                                       | Type    | Possible Operators                                                       | Description                                                                                                                                                                          |
| ------------------------------------------- | ------- | ------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| **Guid**                                    | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | A unique identifier that is a combination of GUID of selected `Scan` and Active Directory `ObjectGUID` of the object.                                                                |
| **FSName**                                  | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | A special unique identifier that is a combination of the `Name of the Organizational Unit` and the `Fully Qualified Domain Name of the Domain`                                       |
| **Name**                                    | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | Name of the specified object. (**Ldap Display Name**: ou)                                                                                                                            |
| **DistinguishedName**                       | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | Active Directory distinguished name of the object. (**Ldap Display Name**: distinguishedName)                                                                                        |
| **msDSMaximumPasswordAge**                  | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | Defines the maximum number of days a user password remains valid before it must be changed.                                                                                          |
| **msDSPasswordSettingsPrecedence**          | NUMBER  | `EQUAL`, `BETWEEN`, `SMALLER`, `LARGER`, `SMALLER_EQUAL`, `LARGER_EQUAL` | Specifies the precedence of the password policy. Lower numbers have higher priority.                                                                                                 |
| **msDSPasswordReversibleEncryptionEnabled** | BOOLEAN | `N/A`                                                                    | Specifies whether reversible encryption is enabled for user passwords.                                                                                                               |
| **MinimumPasswordAge**                      | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | Specifies the minimum number of days a user must wait before changing their password again.                                                                                          |
| **msDSPasswordComplexityEnabled**           | BOOLEAN | `N/A`                                                                    | The status of password complexity requirements for user accounts.                                                                                                                    |
| **msDSLockoutObservationWindow**            | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | Specifies the time window (in minutes) during which failed logon attempts are counted before account lockout.                                                                        |
| **msDSPasswordHistoryLength**               | NUMBER  | `EQUAL`, `BETWEEN`, `SMALLER`, `LARGER`, `SMALLER_EQUAL`, `LARGER_EQUAL` | Specifies the number of previous passwords remembered to prevent reuse by the user.                                                                                                  |
| **msDSLockoutThreshold**                    | NUMBER  | `EQUAL`, `BETWEEN`, `SMALLER`, `LARGER`, `SMALLER_EQUAL`, `LARGER_EQUAL` | Specifies the number of failed logon attempts allowed before the user account is locked out.                                                                                         |
| **msDSLockoutDuration**                     | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | Specifies the duration (in minutes) that a user account remains locked after reaching the lockout threshold.                                                                         |
| **msDSMinimumPasswordLength**               | NUMBER  | `EQUAL`, `BETWEEN`, `SMALLER`, `LARGER`, `SMALLER_EQUAL`, `LARGER_EQUAL` | Specifies the minimum number of characters required in a user password.                                                                                                              |
| **IsWeak**                                  | BOOLEAN | `N/A`                                                                    | Shows whether the password policy settings are considered insecure, based on factors like short passwords, lack of complexity, absence of account lockout, or reversible encryption. |