# FGPP

| Field                                       | Type    | Possible Operators                                                       | Description                                                                                                                                                                          |
| ------------------------------------------- | ------- | ------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| **Guid**                                    | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | A unique identifier that is a combination of GUID of selected `Scan` and Active Directory `ObjectGUID` of the object.                                                                |
| **FSName**                                  | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | A special unique identifier that is a combination of the `Name of the Organizational Unit` and the `Fully Qualified Domain Name of the Domain`                                       |
| **Name**                                    | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | Name of the specified object. (**Ldap Display Name**: ou)                                                                                                                            |
| **DistinguishedName**                       | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | Active Directory distinguished name of the object. (**Ldap Display Name**: distinguishedName)                                                                                        |
| **msDSMaximumPasswordAge**                  | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | Defines the maximum number of days a user password remains valid before it must be changed.                                                                                          |
| **msDSPasswordSettingsPrecedence**          | NUMBER  | `EQUAL`, `BETWEEN`, `SMALLER`, `LARGER`, `SMALLER_EQUAL`, `LARGER_EQUAL` | Specifies the precedence of the password policy. Lower numbers have higher priority.                                                                                                 |
| **msDSPasswordReversibleEncryptionEnabled** | BOOLEAN | `N/A`                                                                    | Specifies whether reversible encryption is enabled for user passwords.                                                                                                               |
| **MinimumPasswordAge**                      | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | Specifies the minimum number of days a user must wait before changing their password again.                                                                                          |
| **msDSPasswordComplexityEnabled**           | BOOLEAN | `N/A`                                                                    | The status of password complexity requirements for user accounts.                                                                                                                    |
| **msDSLockoutObservationWindow**            | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | Specifies the time window (in minutes) during which failed logon attempts are counted before account lockout.                                                                        |
| **msDSPasswordHistoryLength**               | NUMBER  | `EQUAL`, `BETWEEN`, `SMALLER`, `LARGER`, `SMALLER_EQUAL`, `LARGER_EQUAL` | Specifies the number of previous passwords remembered to prevent reuse by the user.                                                                                                  |
| **msDSLockoutThreshold**                    | NUMBER  | `EQUAL`, `BETWEEN`, `SMALLER`, `LARGER`, `SMALLER_EQUAL`, `LARGER_EQUAL` | Specifies the number of failed logon attempts allowed before the user account is locked out.                                                                                         |
| **msDSLockoutDuration**                     | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | Specifies the duration (in minutes) that a user account remains locked after reaching the lockout threshold.                                                                         |
| **msDSMinimumPasswordLength**               | NUMBER  | `EQUAL`, `BETWEEN`, `SMALLER`, `LARGER`, `SMALLER_EQUAL`, `LARGER_EQUAL` | Specifies the minimum number of characters required in a user password.                                                                                                              |
| **IsWeak**                                  | BOOLEAN | `N/A`                                                                    | Shows whether the password policy settings are considered insecure, based on factors like short passwords, lack of complexity, absence of account lockout, or reversible encryption. |


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.forestall.io/fsprotect/search-and-reports/fgpp.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.