Solved

SBS 2008 GPO Password Policy is not applied

Posted on 2011-02-16
4
871 Views
Last Modified: 2012-08-13
I have updated the password policy under the Default Domain Policy in SBS 2008.  For whatever reason clients cannot change their passwords.

My current policy is as follows
Policy Setting
Enforce password history 0 passwords remembered
Minimum password length 6 characters
Password must meet complexity requirements Enabled
Store passwords using reversible encryption Disabled

When users go to change their password they recieve an error even when the password meets these requirments.  I've tried running gpupdate on the server and the clients but still have the issue.  I've searched through other GPO's and havn't found any conflicting settings.  The only way I can update a password is to manually do it in active directory.
0
Comment
Question by:tc6atim
4 Comments
 
LVL 77

Expert Comment

by:Rob Williams
ID: 34909537
Two thoughts:
What is Minimum password age set to? The password must be older than the minimum in order for the user to be able to change it.
In Active directory under the account tab of the users profile make sure "user cannot change password" is not checked.
0
 
LVL 13

Accepted Solution

by:
connectex earned 400 total points
ID: 34909639
Did you manually change the GPO or do it through the SBS wizard? The SBS Wizard also sets the password need to be changed option on the non-administrator user accounts.
0
 
LVL 14

Expert Comment

by:JAN PAKULA
ID: 34909647
make sure that If this policy is enabled, passwords must meet the following

Not contain the user's account name or parts of the user's full name that exceed two consecutive characters
Be at least six characters in length
Contain characters from three of the following four categories:
English uppercase characters (A through Z)
English lowercase characters (a through z)
Base 10 digits (0 through 9)
Non-alphabetic characters (for example, !, $, #, %)
Complexity requirements are enforced when passwords are changed or created.

Question is are you allowed to use same password which user tried to change too and failed, on active directory to successfully change passwords?

JAN ICT TECH MA CCNA
0
 
LVL 3

Author Closing Comment

by:tc6atim
ID: 34918968
I manually changed the GPO.  When I checked the password policy in the SBS Wizard in reflected those changes but complained that my 6 character lentgh should really be atleast 7.  I appeased the Wizard, it reapplied the settings.  I started getting calls from the users about Outlook asking to trust the autodiscover file from the server which was weird.  I logged in and was meet with a request to update my password.  However I was able to use the same password per my policy setting so all is good now.  Thanks for the help!
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
How do I remove a downed SBS 2008 server from my domain 6 61
Group Policies not being applied 12 61
RAID Configuration 18 52
How to safely test out TFTP server software 12 69
Both MMF (multi-mode fiber) and SMF (single-mode fiber) are types of optical fiber that can aid in communication applications. These thin strands of silica or glass will allow communication to occur between devices. The transmission of light between…
Developer portfolios can be a bit of an enigma—how do you present yourself to employers without burying them in lines of code?  A modern portfolio is more than just work samples, it’s also a statement of how you work.
XMind Plus helps organize all details/aspects of any project from large to small in an orderly and concise manner. If you are working on a complex project, use this micro tutorial to show you how to make a basic flow chart. The software is free when…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…

825 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question