npanprome
asked on
unable to create a local user
Dear Experts,
We are trying to create a local user account on a windows server 2003 server SP1 machine
(well we are able to create this before), when we try to create a local account it said
The following error does not meet the password policy requirements. Check the minimum password length, password complexity and password history requirement
I check on all domain controller already and turn off the complex password, I try create a username with password Pass#1234 and Ab123$c (which meet the requirement) the password length is 7 (this is meet also) and the password history (well this is a new user should not have this) still get the error
I checked on the domain security, local policy already also still can't create user, please advice
We are trying to create a local user account on a windows server 2003 server SP1 machine
(well we are able to create this before), when we try to create a local account it said
The following error does not meet the password policy requirements. Check the minimum password length, password complexity and password history requirement
I check on all domain controller already and turn off the complex password, I try create a username with password Pass#1234 and Ab123$c (which meet the requirement) the password length is 7 (this is meet also) and the password history (well this is a new user should not have this) still get the error
I checked on the domain security, local policy already also still can't create user, please advice
What is the specific command you are using to create the account? Is it a "net user" CLI call or are you doing it from within a GUI? You've probably already been through this, but if not try these insctructions: http://netsecurity.about.com/od/stepbystep/ss/winpasswords_4.htm
ASKER
I used both command line (net user) and GUI to create user but it's giving back the same error,
I changed my password history to 0 and minimun password age to 0 also still doesn't work
(I already gpupdate /force and restart also)
I changed my password history to 0 and minimun password age to 0 also still doesn't work
(I already gpupdate /force and restart also)
Have you tried using rsop.msc to find out what the effective policy is on the machine: http://support.microsoft.com/kb/323276
If this is a local account on a member server the policy must be set in the local security policy - make sure that's where you are setting it.
ASKER
I ran rsop and checked the Computer Configuration > Windows Settings > Security Setting > Account Policies > Password Policy
Enforce password history = 1 passwords remembered source GPO <POLICY FROM PDC>
Maximum password age = 90 days source GPO <POLICY FROM PDC>
Minimum password age = 0 days source GPO <POLICY FROM PDC>
Minimum password length = 7 chars source GPO <POLICY FROM PDC>
Password must meet complexity requirements = Disabled source GPO <POLICY FROM PDC>
Store passwords using reversible encryption = Not Defined
I still got an error when I create a new user
Please advice
Enforce password history = 1 passwords remembered source GPO <POLICY FROM PDC>
Maximum password age = 90 days source GPO <POLICY FROM PDC>
Minimum password age = 0 days source GPO <POLICY FROM PDC>
Minimum password length = 7 chars source GPO <POLICY FROM PDC>
Password must meet complexity requirements = Disabled source GPO <POLICY FROM PDC>
Store passwords using reversible encryption = Not Defined
I still got an error when I create a new user
Please advice
ASKER
I checked the local security policy already also
Enforce password history = 1 passwords remembered
Maximum password age = 90 days
Minimum password age = 0 days
Minimum password length = 7 chars
Password must meet complexity requirements = Disabled
Store passwords using reversible encryption = Disabled
Still can't create local user account
Enforce password history = 1 passwords remembered
Maximum password age = 90 days
Minimum password age = 0 days
Minimum password length = 7 chars
Password must meet complexity requirements = Disabled
Store passwords using reversible encryption = Disabled
Still can't create local user account
The account that you are signed in as when you are trying to add the user is in the administrators group on the server right?
ASKER
yes, it's both domain admin and local admin
Check out this KB: http://support.microsoft.com/?id=269236
ASKER
I check on all PDC and BDC none of the Block Policy Inheritance is enable. This still don't solve the problem
When you create the user, have you tried clearing the checkbox for "password never expires"? I'm just wondering if that checkbox is checked, if it runs afoul of the 90 day maximum policy for the domain.
ASKER
I try to create user and have a check mark on "password never expires" it still unable to create the user
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Closed, 500 points refunded.
Vee_Mod
Community Support Moderator
Vee_Mod
Community Support Moderator