Avatar of Fred D
Fred DFlag for United States of America

asked on 

Windows 2012 Foundation Server - How to stop Administrator password from expiring?

Having installed a few Windows 2012 Foundation servers I would like to somehow stop the administrator's password from expiring and restore the original password.
I've tried using the GP Management console and editing the Default Domain Policies, Windows Settings, Security Settings, Account Policy, Password Policy, and Disabling all of the entries there.  Then I did a gpupdate /force.
But when I try to change the administrator password using Ctrl-Alt-Del it tells me "Unable to update the password. The value provided for the new password does not meet the length, complexity, or history requirements of the domain."
I even tried to do this using the AD Administrative Center and adding a new Password Setting entry but that didn't work either.

I would like to change the administrator's password back to what it was before it expired and then to disable only the administrator's password from expiring.

Thank you.
Microsoft Legacy OSServer SoftwareOS Security

Avatar of undefined
Last Comment
Fred D
Avatar of Frosty555
Frosty555
Flag of Canada image

Domain controllers often have additional group policies applied which overrides the default domain policy. By default I'm pretty sure there is a "Default Domain Controllers Policy" where this information is set.

Open a command prompt window as Administrator, and run "gpresult /r". This will show you all of the policies applied to the computer both under the Computer Settings context, and the User Settings context. You'll also get information about what security groups the computer and the logged in user belongs to.

You'll need to look inside of those policies to determine which one is enforcing password complexity / history on your domain controller.
Avatar of Fred D
Fred D
Flag of United States of America image

ASKER

Thanks for your quick reply. I've attached the results of the gpresults /r in a text file.
I thought that my changes would encompass all of the security groups??
Are you saying that I have to edit every one of these groups?
This is an out of the box Foundation server with about a week's worth of customization for a local domain??
Thank you.
Admin-Password-GPResult-R.txt
ASKER CERTIFIED SOLUTION
Avatar of McKnife
McKnife
Flag of Germany image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Avatar of Fred D
Fred D
Flag of United States of America image

ASKER

Thank you and sorry for the delay.
Microsoft Legacy OS
Microsoft Legacy OS

The Microsoft Legacy Operating System topic includes legacy versions of Microsoft operating systems prior to Windows 2000: All versions of MS-DOS and other versions developed for specific manufacturers and Windows 3/3.1, Windows 95 and Windows 98, plus any other Windows-related versions, and Windows Mobile.

55K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo