Solved

problem with password policy

Posted on 2006-11-07
5
251 Views
Last Modified: 2010-04-18
recently I installed a new windows server 2003 std R2.
I am trying to create a user, for example bob, with the password bob.
I know this aint secure, but is it a test.
I changed (disabled) the default domain password policy.
I did a gpupdate /force to apply the policy.
I can make most passwords .... but not the simple ones like 'bob'.

Because there is NO policy which apllied password policies, what can stop these short password from being accepted?
Is this smth new in R2??
0
Comment
Question by:suppsaws
  • 2
  • 2
5 Comments
 
LVL 83

Expert Comment

by:oBdA
ID: 17887787
Disabling the password policy won't help you too much, because Server 2003 has some minimum password requirements by default; you need to explicitly disable the password policies, including the minimum length.
0
 
LVL 21

Author Comment

by:suppsaws
ID: 17887829
I did disable them, but still I cannot make a password with for example 3 letters, strange
0
 
LVL 83

Accepted Solution

by:
oBdA earned 500 total points
ID: 17887945
Reading it again, this sounds somewhat misleading. What I meant to say is that you need to leave the password policy GPO enabled, but you you need to explicitly set the complexity policy in this GPO to disabled, and the minimum password length to 0.
0
 
LVL 7

Expert Comment

by:jalilthe1
ID: 17905631
Topic : Changes are not applied when you change the password policy
------------------------------------------------------------------------------------------

CAUSE
This issue can occur in either of the following scenarios:
• The Block Policy Inheritance option is enabled on the Domain Controllers organizational unit.
• The password policy is not set in the Default Domain policy.  


RESOLUTION

To resolve this issue, disable the Block Policy Inheritance option on the Domain Controllers organizational unit:

1. Start the Active Directory Users and Computers snap-in.
2. Right-click the Domain Controllers organizational unit, click Properties, and then click to clear the Block Policy Inheritance check box.
3. On the domain controllers, run the following command:

secedit /refreshpolicy machine_policy /enforce

-------------  for more information visit the link -------------------------------------

http://support.microsoft.com/kb/269236/en-us
0
 
LVL 7

Expert Comment

by:jalilthe1
ID: 17905667
0

Featured Post

Get up to 2TB FREE CLOUD per backup license!

An exclusive Black Friday offer just for Expert Exchange audience! Buy any of our top-rated backup solutions & get up to 2TB free cloud per system! Perform local & cloud backup in the same step, and restore instantly—anytime, anywhere. Grab this deal now before it disappears!

Join & Write a Comment

Suggested Solutions

Preface Having the need * to contact many different companies with different infrastructures * do remote maintenance in their network required us to implement a more flexible routing solution. As RAS, PPTP, L2TP and VPN Client connections are no…
I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now