• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 628
  • Last Modified:

How to change Active Directory Password Security Policy

I just create a PDC using Windows 2008 Standard.  I have connected up my first sub-node to the domain, and tried to change the password.  Every combination I have tried says it isn't long enough or complex enough, my last 2 tries were @pP!ej@(k and @pP!e-2009-j@(k neither of which worked.

Any ideas how I can change the password policy to something a bit more user friendly?
  • 2
1 Solution
The account password policies for your domain typically reside in the Default Domain Policy.
Have a look in your Default Domain Policy...
Computer Configuration | Windows Settings | Security Settings | Account Policies | Password Policy
Change any settings here that are too strict for your purposes.
SatTechSolutionsAuthor Commented:
Don't see any of those, this is Windows 2008 Server
Did you look in the GPMC for the 'Default Domain Policy' group policy object?
Granted, in 2008 there's been some changes. Password settings can be handled by Password Setting Objects (PSO) which are objects in AD rather than settings within a group policy object. This is to allow for multiple policies within the same domain which 2003 didn't allow. Have a look at ...http://technet.microsoft.com/en-us/magazine/cc137749.aspx ... and read the section referring to 2008.
However  - the default settings, before you create a PSO, should still be handled in the 'Default Domain Policy' group policy object. Are you saying that when you open this GPO with the GPMC, these policy settings do not exist? Have a read of this, regarding the default policy settings in 2008 : http://technet.microsoft.com/en-us/library/cc264456.aspx - this also explains the default password complexity criteria.
The following article explains how to create fine-grained password policies, if this is of interest to you : http://www.windowsecurity.com/articles/Configuring-Granular-Password-Settings-Windows-Server-2008-Part-1.html
Like i say though, you should be able to modify the 'out-of-the-box' policy with group policy as in 2003.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Get 10% Off Your First Squarespace Website

Ready to showcase your work, publish content or promote your business online? With Squarespace’s award-winning templates and 24/7 customer service, getting started is simple. Head to Squarespace.com and use offer code ‘EXPERTS’ to get 10% off your first purchase.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now