Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

SBS2008 - Complex Password Setting Greyed Out

Posted on 2010-11-15
6
1,366 Views
Last Modified: 2012-05-10
I am configuring an SBS2008 Domain Controller. Against advice I have to turn off complex passwords. However, every way round I try it the setting is greyed out. I have tried the following procedure and it is still greyed out

      • Click start and type gpedit.msc to open the Policy Editor
      • Open Computer Configuration (left hand pane)
      • Open Windows Settings (left hand pane)
      • Open Security Settings (left hand pane)
      • Open Account Policies (left hand pane)
      • Open Password Policy (left hand pane)
      • Doubleclick on the Password must meet complexity requirements
      • Select Disabled
      • Press OK 
      • Close the Policy Editor
      • Run gpupdate.exe
Anybody got any ideas?
0
Comment
Question by:NorthstarIT
6 Comments
 
LVL 4

Expert Comment

by:The_Dark1
ID: 34135173
Hi There,

That will open the Group Policy on the DC from memory.

Try opening the GPO object on the local machine.

From memory, the setting is only on the Local Security Policy, not the Full GPO published to the clients...?

Click Start - Run - mmc
Open Snap-in - Select Group Policy Object = Select "Local Machine"

And browse through to the area you mentioned earlier in your post, form there you should be able to modify the policy and apply it...

The once completed, click Start - Run, CMD and enter

and type: gpupdate /force

See if that resolves the issue

0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 34135183
There are numerous policies controlling your domain. You have to change the one controlling it, in other locations it will be grayed out. The key is you need the "default domain policy"

With SBS 2008 you should be able to do so by going to administrative tools | group policy management console | under "group policy objects" right click on the Default Domain Policy and choose edit | computer configuration | policies | windows settings | security settings | account policies
0
 
LVL 2

Accepted Solution

by:
anupvs earned 500 total points
ID: 34135189
Hi,

Below is the solution
(1) Goto Start>Run type in gpmc.msc (Group Policy Management)
(2) Expand your Domain
(3) Go to <Group Policy Objects> and select <Default Domain Policy>
(3.5 - optional) On the Delegation Tab of Default Domain Policy, I had to add the administrators group with full permissions to edit, delete and modify settings. Just choose Add, type administrators, search, accept and choose permissions.
(4) Back on the left side in the tree, right click on Default Domain Policy and choose Edit
(5) Expand: <Computer Configurations> <Policies> <Windows Settings> <Security Settings> <Account Policies> <Password Policy>
(6) Disable Password Complexity or change any other settings as desired.
(7) Close Editor, goto start>run and type in gpupdate /force

Always apprecating the orginal solution providers of Microsoft technet forum members for the above solution.

Hope this will help you.
0
Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 

Author Comment

by:NorthstarIT
ID: 34135190
Just tried your suggestion and the policy option to disable it is still greyed out
0
 

Author Comment

by:NorthstarIT
ID: 34135192
anupvs - Trying your suggestion now
0
 

Author Closing Comment

by:NorthstarIT
ID: 34135220
Perfect, thank you
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Written by Glen Knight (demazter) as part of a series of how-to articles. Introduction One of the biggest consumers of disk space with Small Business Server 2008(SBS) is Windows Server Update Services, more affectionately known as WSUS. For t…
I've often see, or have been asked, the question about the difference between the Exchange 2010 SP1 version, available as part of Small Business Server (SBS) 2011, and the “normal” Exchange 2010 SP1 Standard. The answer to the question is relativ…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

790 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question