Solved

enabling complexity requirements

Posted on 2014-09-24
4
123 Views
Last Modified: 2014-09-29
I want to add more security on my network by enabling complexity requirements on my current domain default policy (2008 AD). I’m worried about the impact on one domain admin account that runs services, scripts and other automatic task. Over the years this account was used without proper documentation.

My questions is: What will happen when I enable complex password on the domain policy for an account that is configured like this:
•      Domain admin
•      Password never expire
•      Has already a complex password

Thank you
0
Comment
Question by:Physimed
  • 2
  • 2
4 Comments
 
LVL 6

Expert Comment

by:Sir Learnalot
ID: 40341649
There is no problem. As long as you can login to the domain controller, you can reset the account password to match the new security policy for password complexity from AD. Right click the user and select "Reset Password". Hope this helps, if it does please mark it as the answer. Thank you and have a great day! :)
0
 

Author Comment

by:Physimed
ID: 40341979
Thank you for the answer
But I really need to know what are the risks of the action, because admin password must not be changed
0
 
LVL 6

Accepted Solution

by:
Sir Learnalot earned 500 total points
ID: 40342419
#1) If the current password already matches the complexity requirements there will be no effect on the account.

#2) Even if you "Reset" the password, you can just set the "new" password as the same thing.... Effectively you are not really changing the password.
0
 

Author Closing Comment

by:Physimed
ID: 40349739
Thank you for the answer
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question