1st time setting up AD

Posted on 2007-10-16
Last Modified: 2010-03-17
Be forewarned, this is my 1st time setting up Active Directory.

That being said, I installed Server 2003, did MS updates, and so on.
I installed AD. I went to add myself as a user, it said my password wasn't complex/long enough. I found in the policy editor where you change the requirements, and turned everything off, so in theory there are no requirements. I did a manual force policy update.

I went back to add myself, same thing. I rebooted the server, same thing. What am I missing?

Question by:wonker2
    LVL 30

    Accepted Solution

    Where exactly did you change the password policy requirements?  If you have not followed the attached steps, you may not have actually disabled the password complexity requirements for your domain:
    LVL 70

    Expert Comment

    Where did you change the policy?
    To change it for the domain you need to change the policy in the default domain policy - in the admin tools

    To change it on the local machine (if not a domain controller) you need to do it in the Local Policy (again in admin tools)

    If you can't see admin tools go to them via the control panel.

    use GUPDATE /force to apply the policy and then try again
    LVL 70

    Expert Comment

    Opps - sorry Laura I'm too slow again ;-)  ... and I misspelt GPUPDATE !

    Enforce Password History: (Default 24) - Stops you using the same password each time by remembering previous passwords you have used.

    Maximum Password Age: (Default 42) - Forces users to make up a new password at the specified interval - 0 = never expires (unless the account is marked "Password does not expire")

    Minimum Password Age: (Default 0) - Passwords must be at least this age before they can be changed (stops user changing passwords too often)

    Minimum Password Length (Default 8) - Passwords must have at least this number of characters

    Password Must Meet Complexity Requirements: (Default Enabled) : in enabled Passwords must contain:-
    At least one letter A-Z
    At least one letter a-z
    At least one number 0 - 9
    At least one character that is neither a letter or a number


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    As network administrators; we know how hard it is to track user’s login/logout using security event log (BTW it is harder now in windows 2008 because user name is always “N/A” in the grid), and most of us either get 3rd party tools, or just make our…
    [b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now