RE: User cannot change password

Jeremy_at_gilbarco
Date: 07/28/04


Date: Wed, 28 Jul 2004 04:55:18 -0700

I am absolutly certain that I the passwords meet
complexity requirements.
>-----Original Message-----
>Hi Jeremy,
>
>Make sure that the password users give meet the
complexity requirements.
>Simply having a password isn't enough. The key to
preventing unauthorized
>access to network resources is to use secure passwords.
The difference
>between an average password and a secure password is that
secure passwords
>are difficult to guess and crack. You make passwords
difficult to crack by
>using combinations of all the available character types-
including lowercase
>letters, uppercase letters, numbers, and symbols. For
example, instead of
>using happydays for a password you would use haPPy2Days&,
Ha**y!dayS, or
>even h*PPY%d*ys.
>
>This Password policy might have enabled in Group policy.
The policies are
>given below.
>
>Minimum Password Length
>
>Minimum Password Length sets the minimum number of
characters for a
>password. If you haven't changed the default setting,
you'll want to do so
>immediately. The default is to allow empty passwords
(passwords with zero
>characters), which is definitely not a good idea.
>
>For security reasons, you'll generally want passwords of
at least eight
>characters. The reason for this is that long passwords
are usually harder
>to crack than short ones. If you want greater security,
set the minimum
>password length to 14 characters.
>
>Passwords Must Meet Complexity Requirements
>
>Beyond the basic password and account policies, Windows
2000 includes
>facilities for creating additional password controls.
These facilities are
>available in the password filters, which can be installed
on a domain
>controller. If you've installed a password filter, enable
Passwords Must
>Meet Complexity Requirements. Passwords are then required
to meet the
>filter's security requirement.
>
>For example, the standard Windows NT filter
(PASSFILT.DLL) enforces the use
>of secure passwords that follow these guidelines:
>
>. Passwords must be at least six characters long.
>
>. Passwords can't contain the user name, such as stevew,
or parts of the
>user's full name, such as Steve.
>
>. Passwords must use three of the four available
character types: lowercase
>letters, uppercase letters, numbers, and symbols.
>
>Jeremy, please let me know if users are unable to change
their password
>even after giving secure one.
>
>Thanks,
>
>sjhari@online.microsoft.com
>
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>
>
>
>
>.
>



Relevant Pages

  • RE: User cannot change password
    ... Make sure that the password users give meet the complexity requirements. ... access to network resources is to use secure passwords. ... Minimum Password Length sets the minimum number of characters for a ... characters), which is definitely not a good idea. ...
    (microsoft.public.win2000.active_directory)
  • Re: Password Complexity issue
    ... "Password must meet complexity requirements" means that at the same time: ... characters ... > Account is disabled orginally. ... > Maximum password age 120 days ...
    (microsoft.public.windows.server.active_directory)
  • RE: Password complexity - improvement
    ... complexity requirements, and you knew the first three characters were ... were Aa1 in order to only try special characters for the 4th. ... even complexity requirements can't replace user education. ...
    (Focus-Microsoft)
  • Re: Password Policy Settings
    ... Maximum password age / 45 days ... Minimum password length / 8 characters ... Password must meet complexity requirements / Enabled ... Now my users cannot enter passwords over 8 characters, ...
    (microsoft.public.windows.group_policy)
  • RE: User creation - password policy rejection
    ... When you set the Passwords must meet complexity requirements policy setting, ... Your password must be at least x characters; ... I've disabled Password Complexity option under Domain Security and Domain ...
    (microsoft.public.windows.server.active_directory)

Loading