Solved

SBS2008 - Complex Password Setting Greyed Out

Posted on 2010-11-15
6
1,358 Views
Last Modified: 2012-05-10
I am configuring an SBS2008 Domain Controller. Against advice I have to turn off complex passwords. However, every way round I try it the setting is greyed out. I have tried the following procedure and it is still greyed out

      • Click start and type gpedit.msc to open the Policy Editor
      • Open Computer Configuration (left hand pane)
      • Open Windows Settings (left hand pane)
      • Open Security Settings (left hand pane)
      • Open Account Policies (left hand pane)
      • Open Password Policy (left hand pane)
      • Doubleclick on the Password must meet complexity requirements
      • Select Disabled
      • Press OK 
      • Close the Policy Editor
      • Run gpupdate.exe
Anybody got any ideas?
0
Comment
Question by:NorthstarIT
6 Comments
 
LVL 4

Expert Comment

by:The_Dark1
ID: 34135173
Hi There,

That will open the Group Policy on the DC from memory.

Try opening the GPO object on the local machine.

From memory, the setting is only on the Local Security Policy, not the Full GPO published to the clients...?

Click Start - Run - mmc
Open Snap-in - Select Group Policy Object = Select "Local Machine"

And browse through to the area you mentioned earlier in your post, form there you should be able to modify the policy and apply it...

The once completed, click Start - Run, CMD and enter

and type: gpupdate /force

See if that resolves the issue

0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 34135183
There are numerous policies controlling your domain. You have to change the one controlling it, in other locations it will be grayed out. The key is you need the "default domain policy"

With SBS 2008 you should be able to do so by going to administrative tools | group policy management console | under "group policy objects" right click on the Default Domain Policy and choose edit | computer configuration | policies | windows settings | security settings | account policies
0
 
LVL 2

Accepted Solution

by:
anupvs earned 500 total points
ID: 34135189
Hi,

Below is the solution
(1) Goto Start>Run type in gpmc.msc (Group Policy Management)
(2) Expand your Domain
(3) Go to <Group Policy Objects> and select <Default Domain Policy>
(3.5 - optional) On the Delegation Tab of Default Domain Policy, I had to add the administrators group with full permissions to edit, delete and modify settings. Just choose Add, type administrators, search, accept and choose permissions.
(4) Back on the left side in the tree, right click on Default Domain Policy and choose Edit
(5) Expand: <Computer Configurations> <Policies> <Windows Settings> <Security Settings> <Account Policies> <Password Policy>
(6) Disable Password Complexity or change any other settings as desired.
(7) Close Editor, goto start>run and type in gpupdate /force

Always apprecating the orginal solution providers of Microsoft technet forum members for the above solution.

Hope this will help you.
0
Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

 

Author Comment

by:NorthstarIT
ID: 34135190
Just tried your suggestion and the policy option to disable it is still greyed out
0
 

Author Comment

by:NorthstarIT
ID: 34135192
anupvs - Trying your suggestion now
0
 

Author Closing Comment

by:NorthstarIT
ID: 34135220
Perfect, thank you
0

Featured Post

New! My Passport Wireless Pro Wi-Fi Mobile Storage

Portable wireless storage to offload, edit, and stream anywhere.

High-capacity, wireless mobile storage designed to accompany professional photographers and videographers in the field to easily offload, edit and stream captured photos and high-definition videos.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This guide is intended for migrating Windows 2003 Standard with Exchange 2003 to Windows Small Business Server 2008. You will need the following: Exchange Best Practice Analyzer: http://www.microsoft.com/downloads/details.aspx?FamilyID=DBAB201F-…
I’m often asked about newer and larger USB drives connected to SBS2008 and 2011 failing Windows Server Backup vs the older USB drives not failing. As disk space continues to grow and drive technology change SBS2008 and some SBS2011 end up with the f…
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
Learn how to create flexible layouts using relative units in CSS.  New relative units added in CSS3 include vw(viewports width), vh(viewports height), vmin(minimum of viewports height and width), and vmax (maximum of viewports height and width).

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now