From domain securyity to local cannot change password complexity

Posted on 2007-08-08
Last Modified: 2008-05-31
I joined a XP workstation to a Window 2003 domain. Our password account policies requires a min of 7 characters with complexity.
I need to give a customer one of our PC's. They do not require password complexity. Frankly they require no complexity the system will be in a closed environment.

I took the workstation off the domain and joined it to a workgroup. I've logged on with the local admin account. When I look at local security policies the password policy is locked (grayed out). I cannot change the complexity requirement.
Question by:oceanjim
    LVL 70

    Expert Comment

    The password policy on a domain is set by the domain security policy and that prevents chnages being made to the local machine. If the machine is on your domain it has to abide by the domain password policies - full stop - no exceptions.

    Take the machine off the domain, reboot and try running GPEDIT.MSC from the command line
    LVL 25

    Accepted Solution

    open local security policy snap-in...
    top level...right click and choose import policy.  Choose Setup security.inf.
    This will default it back to the out of the box settings,.
    LVL 2

    Author Comment

    KCTS the gpedit.msc didn't allow me to change the complexity requirement.

    xuserx2000 I'll try to import a new local policy. Thanks I'll let you know how it goes.
    LVL 2

    Author Comment

    xuserx2000 It worked perfect. Thanks

    Featured Post

    Maximize Your Threat Intelligence Reporting

    Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

    Join & Write a Comment

    If your system is showing symptoms of browser hijacks or 'google search redirects' check out my other article ( first and run the tool TDSSKiller ( to get rid of the infection. Once done, and if the …
    Sometimes people don't understand why download speed shows differently for Windows than Linux.Specially, this article covers and shows the solution for throughput difference for Windows than a Linux machine. For this, I arranged a test scenario.I…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    24 Experts available now in Live!

    Get 1:1 Help Now