We are migrating Active Directory from from Windows Server 2003 to 2008 shortly. With 2008 we would like to be able to use a separate password policy for a particular group of PCs. One suggested password policy would force users to choose a new password from a predefined list when a password expires. So we would then effectively be rotating between 3 passwords.
I know this doesn't seem like a good idea and I am proposing a different solution. But can this be done? Can we use Active Directory to store the viable passwords for a particular PC?