Solved

Password Complexity Windows 2008 Server

Posted on 2008-10-10
5
1,560 Views
Last Modified: 2012-05-05
Hi There!

I have a 2008 Domain Controller Freshly Promo'd in a LAB Environment. Single DC, Single server.

I am trying to change the password complexity and I found countless documents explaining the process.

http://technet.microsoft.com/en-us/library/cc264456.aspx   as an example.

I used this policy and disabled the complexity and length requirements and did a gpupdate /force but new users created in the ADUC Applet, still gave an error. After MUCH mucking around I found changing the settings in gpedit.msc fixed my issue.. How can that possibly be?

What am I doing wrong?
0
Comment
Question by:networkn
  • 2
  • 2
5 Comments
 
LVL 13

Expert Comment

by:ScooterAnderson
ID: 22687867
GPEdit.msc is just the Group Policy Editor...

The Password Complexity Requirements are in the Default Domain Policy -
ComputerConfig:Policies:WindowsSettings:SecuritySettings:AccountPolicy:PasswordPolicy

After changing settings there, you'll have to go to a DOS prompt and issue:  gpupdate /force  and let your server pick up the changes to the Domain Policy, or reboot it.
0
 
LVL 13

Expert Comment

by:ScooterAnderson
ID: 22687896
Also, if it's still available on your system (although shouldn't be on a DC), see if Local Security Policy is still available on your system & check policy there.

Another option is to run RSOP.msc on your server, which will parse through GP's to be applied to your system and give the Resultant Set of Policies that is applied to your server/user session.  It will also identify what GP is applying any configured policies so you know where to change policies, if need be.
0
 

Author Comment

by:networkn
ID: 22690914
http://i301.photobucket.com/albums/nn62/networkn/gpo1.jpg

this is where I changed the policy and did a gpupdate /force, however this didn't work, and the only way I could get the password complexity to work was to run gpedit.msc and change it there and run gpupdate /force
0
 

Accepted Solution

by:
networkn earned 0 total points
ID: 22863077
Problem was solved by reinstalling Active Directory.
0

Featured Post

Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Normally after a failure of Domain Controller, when promoting new DC the DC is renamed, we will discuss the options in Dcpromo to re-create the DC with the same name. Scenario: You are a small IT shop with two Domain Controllers (Domain Contr…
OfficeMate Freezes on login or does not load after login credentials are input.
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

713 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question