Solved

Password Complexity Windows 2008 Server

Posted on 2008-10-10
5
1,559 Views
Last Modified: 2012-05-05
Hi There!

I have a 2008 Domain Controller Freshly Promo'd in a LAB Environment. Single DC, Single server.

I am trying to change the password complexity and I found countless documents explaining the process.

http://technet.microsoft.com/en-us/library/cc264456.aspx   as an example.

I used this policy and disabled the complexity and length requirements and did a gpupdate /force but new users created in the ADUC Applet, still gave an error. After MUCH mucking around I found changing the settings in gpedit.msc fixed my issue.. How can that possibly be?

What am I doing wrong?
0
Comment
Question by:networkn
  • 2
  • 2
5 Comments
 
LVL 13

Expert Comment

by:ScooterAnderson
ID: 22687867
GPEdit.msc is just the Group Policy Editor...

The Password Complexity Requirements are in the Default Domain Policy -
ComputerConfig:Policies:WindowsSettings:SecuritySettings:AccountPolicy:PasswordPolicy

After changing settings there, you'll have to go to a DOS prompt and issue:  gpupdate /force  and let your server pick up the changes to the Domain Policy, or reboot it.
0
 
LVL 13

Expert Comment

by:ScooterAnderson
ID: 22687896
Also, if it's still available on your system (although shouldn't be on a DC), see if Local Security Policy is still available on your system & check policy there.

Another option is to run RSOP.msc on your server, which will parse through GP's to be applied to your system and give the Resultant Set of Policies that is applied to your server/user session.  It will also identify what GP is applying any configured policies so you know where to change policies, if need be.
0
 

Author Comment

by:networkn
ID: 22690914
http://i301.photobucket.com/albums/nn62/networkn/gpo1.jpg

this is where I changed the policy and did a gpupdate /force, however this didn't work, and the only way I could get the password complexity to work was to run gpedit.msc and change it there and run gpupdate /force
0
 

Accepted Solution

by:
networkn earned 0 total points
ID: 22863077
Problem was solved by reinstalling Active Directory.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question