Link to home
Start Free TrialLog in
Avatar of tc6atim
tc6atimFlag for United States of America

asked on

SBS 2008 GPO Password Policy is not applied

I have updated the password policy under the Default Domain Policy in SBS 2008.  For whatever reason clients cannot change their passwords.

My current policy is as follows
Policy Setting
Enforce password history 0 passwords remembered
Minimum password length 6 characters
Password must meet complexity requirements Enabled
Store passwords using reversible encryption Disabled

When users go to change their password they recieve an error even when the password meets these requirments.  I've tried running gpupdate on the server and the clients but still have the issue.  I've searched through other GPO's and havn't found any conflicting settings.  The only way I can update a password is to manually do it in active directory.
Avatar of Rob Williams
Rob Williams
Flag of Canada image

Two thoughts:
What is Minimum password age set to? The password must be older than the minimum in order for the user to be able to change it.
In Active directory under the account tab of the users profile make sure "user cannot change password" is not checked.
ASKER CERTIFIED SOLUTION
Avatar of connectex
connectex
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
make sure that If this policy is enabled, passwords must meet the following

Not contain the user's account name or parts of the user's full name that exceed two consecutive characters
Be at least six characters in length
Contain characters from three of the following four categories:
English uppercase characters (A through Z)
English lowercase characters (a through z)
Base 10 digits (0 through 9)
Non-alphabetic characters (for example, !, $, #, %)
Complexity requirements are enforced when passwords are changed or created.

Question is are you allowed to use same password which user tried to change too and failed, on active directory to successfully change passwords?

JAN ICT TECH MA CCNA
Avatar of tc6atim

ASKER

I manually changed the GPO.  When I checked the password policy in the SBS Wizard in reflected those changes but complained that my 6 character lentgh should really be atleast 7.  I appeased the Wizard, it reapplied the settings.  I started getting calls from the users about Outlook asking to trust the autodiscover file from the server which was weird.  I logged in and was meet with a request to update my password.  However I was able to use the same password per my policy setting so all is good now.  Thanks for the help!