Having installed a few Windows 2012 Foundation servers I would like to somehow stop the administrator's password from expiring and restore the original password.
I've tried using the GP Management console and editing the Default Domain Policies, Windows Settings, Security Settings, Account Policy, Password Policy, and Disabling all of the entries there. Then I did a gpupdate /force.
But when I try to change the administrator password using Ctrl-Alt-Del it tells me "Unable to update the password. The value provided for the new password does not meet the length, complexity, or history requirements of the domain."
I even tried to do this using the AD Administrative Center and adding a new Password Setting entry but that didn't work either.
I would like to change the administrator's password back to what it was before it expired and then to disable only the administrator's password from expiring.
Thank you.
Open a command prompt window as Administrator, and run "gpresult /r". This will show you all of the policies applied to the computer both under the Computer Settings context, and the User Settings context. You'll also get information about what security groups the computer and the logged in user belongs to.
You'll need to look inside of those policies to determine which one is enforcing password complexity / history on your domain controller.