New 2008 R2 server - DCpromo fails on DSRM password: does not meet requirement of the password filter(s)
Posted on 2011-03-10
Forest with single domain and 2 existing DCs.
I am trying to add a brand new Windows server 2008 R2 SP1 Standard edition as a DC to the domain. The domain has been fully prepared for the new 2008 DC with /forestprep and /domainprep. AD is fully replicated between the two existing 2003 DCs in the domain. When DCpromo Active Directory Domain Services Installation Wizard on the 2008 machine comes to the "set the active directory restore mode passoword" bit, it fails to set the password with the following error message:
The password does not meet a requirement of the password filter(s). Enter a suitable password.
I have been unable to find a solution or way round this problem and has therefore not yet been able to add this 2008 server in as a new DC to the existing domain.
The W2008 R2 server is a brand new vanilla install, with SP1 applied and Windows Updates fully up-to-date. I have tried things like moving the 2008 computer account to an OU which blocks all PGOs but this has not made any difference. There are NOT any 3rd party password filtering solutions in use on this domain.
I have tried various combinations of passwords. The longest one was 24 characters and included uppercase, lowercase, numbers and additional characters (such as $ and £). None of the passwords I have tried have contained any part of the name of the administrator account or the name of the domain or server itself.
I am at a loss to what is causing this problem and what I can do to fix it.
Any assistance with this would be much appreciated!!