Why domain user can't update password with complexity password
- Our domain level is 2012 R2.
Our user want to change his password with this one w1LL1@mbL@k3
Our domain password policy is
On his Windows 10 Pro computer, the user press Ctrl+Alt+Del, and select Change password. After type in up complexity password, he got error message "Unable to update the password. The value provided for the new password does not meet the length, complexity, or history requirements of the domain."
The password is definitely not in password history.
I enabled another years ago disabled account, and use that account to test password w1LL1@mbL@k3, got same error.
- I also tried below password, doesn't work either
w1LL1@mbLk33
w1Ln19mbL@k3
- I checked applied group policy on user computer by rsop.msc, got same result as domain password policy
Welcome to any advice!
ASKER
Hi Gerwin, the user name is DanielT. I just enabled an account which was disabled three years ago, change password from DC and then login test PC and try update password as w1LL1@mbL@k3.
Maybe the error is because I just changed password. I will try again tomorrow and let you know how it's going.
@Steven Xing - that is what I'm saying, you have to wait 24h
I suspect all of the experts are right, it's a password age issue, you can verify that with the lockout status tool from Microsoft: https://www.microsoft.com/en-us/download/details.aspx?id=15201 and inputting the SAMAccountName.
That will show you the last time the password was set for the account. Even checking and unchecking "Must change password at next login" updates the password age field.
ASKER
Thanks to all the experts. It's Minimum Password age issue.
Are you allowed to repeat letters and numbers in your passwords?