Link to home
Create AccountLog in
Avatar of activateahsd
activateahsd

asked on

Group Policy - complex passwords .....AHHHHHRRRRGGGG!

This is driving me up the wall...
I changed group policy in sbs2003 to block people using MSN messenger at work - i did this in the default domain policy and it works fine, however...
since i have made that change, i am no longer allowed to have passwords that dont conform to the complexity requirements.
I have searched through this website looking at other people with a similar problem and tried setting the password policy explicitly, disabling the password policies, using the resultant group policy snap in thing to show where the policy is coming from but whatever i do the requirement for a complex password remains

please can someone help with this....

thanks
andy

Avatar of Jeff Beckham
Jeff Beckham
Flag of United States of America image

I assume that you are talking about domain user accounts.

Do you have complexity turned off in the Default Domain Policy under Computer Configuration | Windows Settings | Security Settings | Account Policies | Password Policy | Password myst meet complexity requirements?
Avatar of activateahsd
activateahsd

ASKER

yes the setting is 'disabled'
What exactly did you do via GPO that prevents MSN Messenger from working?

Is the Default Domain Policy GPO still linked and enabled at the domain level?

Is there any indication of GPO application problems in the event logs of the DC?
you may find you need to run gpedit.msc to edit the  DC policy as well
i edited the default domain policy, computer config, windows settings, security settings, software restrictions, additional rules and added the path the messenger.
All the policies are still linked
I had a look at the event viewer and cant see anything related to group policy
i checked gpedit on the server and on a client pc and both say the complexity requirement is disabled....

ASKER CERTIFIED SOLUTION
Avatar of Jay_Jay70
Jay_Jay70
Flag of Australia image

Link to home
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
See answer
SOLUTION
Link to home
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
gpresult will still show you what poilicy is applying which is a quick way to show you what you may have missed
Agreed.  I was just offering a GUI option.
:) nothing malicious meant at all :)