Windows Server 2003 - GPO - User account with No password

Hi there,

I have a client that needs to have a user account to have NO password.

In Windows Settings / Security Settings / Account Policies / Password must meet complexity requirements = Disabled.

No other OU has a GPO enforcing Password complexity requirements.

I still cannot reset the password nothing.

LVL 10
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mal OsborneAlpha GeekCommented:
What is a the client OS?  In many cases, a null password will break other stuff, besides being an obvious security risk.

What is the "big picture" here? Perhaps there is a better way?

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ReneGeAuthor Commented:
Hi Malmensa,

Windows XP

There are a few PCs where everyone has access where they have to do very frequently low-security tasks.  Every time they are asked to enter a password and it slows them down.

ReneGeAuthor Commented:
The client specifically asked to remove the password for this user; which is used for these PCs.
CompTIA Security+

Learn the essential functions of CompTIA Security+, which establishes the core knowledge required of any cybersecurity role and leads professionals into intermediate-level cybersecurity jobs.

ReneGeAuthor Commented:
Mal OsborneAlpha GeekCommented:
"Low security tasks" seems fine, however I have seen sites where one morning their server is nothing but a repository for child porn and stolen credit card numbers.  Lots of hackers out there just want access to your machine, not your data.

A possible solution for you would be to set a default username and password. These are kept in the machine's registry, and used when powered on. Once this is done, from the user's perspective, it is as though the machine just goes straight to the desktop, however "behind the scenes" a password is being used. Users need not know it. Quite simple to do, with a couple of registry tweaks.
ReneGeAuthor Commented:
Hi Malmensa,

You asked me: What is the "big picture" here? Perhaps there is a better way?

That made me reflect on the real need rather than the client's request.

It turns out that all PCs due to a GPO were setup to lock after 10 minutes of inactivity.

I removed this and problem solved.  They now don't care to have a password anymore since they don't need to always unlock these PCs :)

Thanks for your help!  Greatly appreciated!!
ReneGeAuthor Commented:
ReneGeAuthor Commented:
Having issues closing this question.
Trying again.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows OS

From novice to tech pro — start learning today.