SBS2011 server password problem

samcory
samcory used Ask the Experts™
on
Please can someone help we though we had a security breach on our SBS2011 server so after doing various tests and scans we then changed the Administrator password.

This password was too complex so we tried to change it again, but this time the server kept coming back that we had not met the lenfth and complexity requirements
(which all we tried were over 8 characters long and contained an uppercase letter, a number and a #)

We then turned off password length and complexity and we are still getting the same message!!
Any help please
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Hi Samcory could you snip the error ? have you consider honeypot ?
Check the password age requirements, if the min age is set to 1 day you can't change it twice the same day.

Author

Commented:
No I dont think thats the problem
When I go into the group policy security this is what it says
Enforce pw history - not defined
max pw age            - not defined
min pw age             - not defined
min pw length       -  8
pw must meet complexity requirements - disabled
store pw using reversible encryption -        disabled
HTML5 and CSS3 Fundamentals

Build a website from the ground up by first learning the fundamentals of HTML5 and CSS3, the two popular programming languages used to present content online. HTML deals with fonts, colors, graphics, and hyperlinks, while CSS describes how HTML elements are to be displayed.

Have you rebooted/run a gpupdate /force since making this change?

Author

Commented:
no, should I?
Try a gpupdate /force first, a reboot shouldn't be necessary but good to rule it out!

Author

Commented:
did that, still cant change password.
Will reboot tonight.
Just to confirm, what Group Policy are you changing? Have you checked the SBS password policy as well as the Default Domain policy?
If you enter this in a cmd prompt:
gpresult /h gpresult.html

Then type in:
gpresult.html

This may give you an indicaton

Author

Commented:
change done in:
Group policy management editor -domain policy
policies
windows settings
security settings
account policy
password policy
Have you checked all the other GPOs, like the SBS password policy mentioned before?

Author

Commented:
all entries in
Windows SBS CSE Policy - windows settings- security -account policy  - password         are not defined
WINDows SBS user policy  as above -not defined
same for Default domain controller policy
Ok great, as long as you've checked Computer Configuration you should be good.

Try the reboot and let us know.

Author

Commented:
Thanks Harryhelp the reboot worked

sam
Glad to hear it!

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial