NorthstarIT
asked on
SBS2008 - Complex Password Setting Greyed Out
I am configuring an SBS2008 Domain Controller. Against advice I have to turn off complex passwords. However, every way round I try it the setting is greyed out. I have tried the following procedure and it is still greyed out
• Click start and type gpedit.msc to open the Policy Editor
• Open Computer Configuration (left hand pane)
• Open Windows Settings (left hand pane)
• Open Security Settings (left hand pane)
• Open Account Policies (left hand pane)
• Open Password Policy (left hand pane)
• Doubleclick on the Password must meet complexity requirements
• Select Disabled
• Press OK
• Close the Policy Editor
• Run gpupdate.exe
Anybody got any ideas?
• Click start and type gpedit.msc to open the Policy Editor
• Open Computer Configuration (left hand pane)
• Open Windows Settings (left hand pane)
• Open Security Settings (left hand pane)
• Open Account Policies (left hand pane)
• Open Password Policy (left hand pane)
• Doubleclick on the Password must meet complexity requirements
• Select Disabled
• Press OK
• Close the Policy Editor
• Run gpupdate.exe
Anybody got any ideas?
There are numerous policies controlling your domain. You have to change the one controlling it, in other locations it will be grayed out. The key is you need the "default domain policy"
With SBS 2008 you should be able to do so by going to administrative tools | group policy management console | under "group policy objects" right click on the Default Domain Policy and choose edit | computer configuration | policies | windows settings | security settings | account policies
With SBS 2008 you should be able to do so by going to administrative tools | group policy management console | under "group policy objects" right click on the Default Domain Policy and choose edit | computer configuration | policies | windows settings | security settings | account policies
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Just tried your suggestion and the policy option to disable it is still greyed out
ASKER
anupvs - Trying your suggestion now
ASKER
Perfect, thank you
That will open the Group Policy on the DC from memory.
Try opening the GPO object on the local machine.
From memory, the setting is only on the Local Security Policy, not the Full GPO published to the clients...?
Click Start - Run - mmc
Open Snap-in - Select Group Policy Object = Select "Local Machine"
And browse through to the area you mentioned earlier in your post, form there you should be able to modify the policy and apply it...
The once completed, click Start - Run, CMD and enter
and type: gpupdate /force
See if that resolves the issue