Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Server Enterprise, 2003, SP2, Active Directory/Password Problems

Posted on 2008-10-13
6
Medium Priority
?
189 Views
Last Modified: 2013-11-08
I use a mixed mode Active Directory

There is currently a Password Policy in place for Password Age, Length, Complexity, and History

I HAVE TO, change a users password back to what it originally was. (Long Story). I have turned the policy(via GPO) off, and I still can not reset this password back to what it was.

I have a 10 CITY MPLS Network, with 10 Domain Controllers. Is replication and Propagation hampering me?
0
Comment
Question by:kplais1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
6 Comments
 
LVL 18

Expert Comment

by:sk_raja_raja
ID: 22706144
1. Start > Administrative Tools > Domain Security Policy
2. Security Settings > Account Policies > Password Policy.
3. Right-click on Minimum password length in the right pane. Click Properties from the context menu.
4. Do not remove the check from the Define this policy setting checkbox! Enter a new minimum password length. Entering a Zero (0) will remove the password requirement. Click the OK button.
5. Double-click on Passwords must meet complexity requirements in the right pane.
6. Do not remove the check from the Define this policy setting checkbox! Select the Disabled option.(This will allow simpler passwords.) Click the OK button.
7. Close the Default Domain Security Settings window.
8. Click Start > Run > cmd {enter}
9. Type gpupdate /force {enter}
10. Type exit {enter}
0
 
LVL 18

Expert Comment

by:sk_raja_raja
ID: 22706176
To make sure the domain controllers replicate,
1) Open Active Directory Sites and Services
2) Navigate to Sites, Default-First-Site-Name, Servers, SERVIDOR, NTDS Settings
3) in the right side, right click <automatically generated>, click Replicate Now.

This assumes a default site structure. You can also check event logs to see if replication has taken place before testing your new settings... replication will usually happen every 15 to 20 minutes.

Now, to make sure the client computer has received the GP changes, you can simply reboot it, or if XP Pro, run gpupdate /force in a command window.
0
 
LVL 1

Author Comment

by:kplais1
ID: 22706210
Thanks, but why when I log into Domain Controller, and go to Domain Security Policy, It says I do not have access. I am in the Domain Admin Group, Enterprise Admin Group. So I can't access that on the DC. I also tried in other cities and can't get to it either.
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 
LVL 18

Expert Comment

by:sk_raja_raja
ID: 22706302
i think you are domain admin of a different domain and you try to access a policy of another domain..you better add yourself to be domain domain in your root domain.....
0
 
LVL 1

Author Comment

by:kplais1
ID: 22706493
We are only a one domain shop. I am a domain admin, on the correct domain.

Here is the Error again.
whenever i tried to open the 'Domain Controller Security Policy' or the 'Domain Security Policy', I'll get this error message saying, 'Failed to open the Group Policy Object. You may not have appropriate rights'. And under the details information, it shows 'The system cannot find the path specified'
0
 
LVL 18

Accepted Solution

by:
sk_raja_raja earned 1500 total points
ID: 22706575
1.ok..do you have 2 nics.The two NICs might be the problem. On your external NIC, make sure that the "Register this connection's addresses in DNS" in the TCP/IP settings is unchecked. And just to be sure, in your DNS server's properties, make sure the DNS service only listens on your internal address.
Then check your forward lookup zone for leftover entries with your DC's name and the external address.

2.are you using GPMC with sp1 to access group policy, if not download and install the latest one,
http://www.microsoft.com/downloads/details.aspx?familyid=0a6d4c24-8cbd-4b35-9272-dd3cbfc81887&displaylang=en

3.Check the following article from Microsoft Support:
http://support.microsoft.com/kb/294257
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/2000/Q_21879349.html
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question