Active Directory Administration Cookbook 2nd Edition -

We create a Password Settings Object (PSO) and apply it directly to a security group.

# Apply it to the 'Domain Admins' group Add-ADFineGrainedPasswordPolicySubject -Identity "HighSecurityPSO" -Subjects "Domain Admins"

We utilize the Search-ADAccount cmdlet, which is specifically optimized for finding accounts based on activity status.