Password Policy Reset to the old setting, Why?

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Homa (Homa_at_discussions.microsoft.com)
Date: 12/11/04 

Date: Sat, 11 Dec 2004 01:23:02 -0800

Hi all!
We have a W2000-Single Domain with 260 DC and 13000 Users. Curently we have
a Password-Policy (set at Domain Security Policy):

Enforce Password History=1 password remmeberd
Maximum password age=999 days
Minimum password age=0 days
Minimum password length=5 characters
Password must meet complexity requirements=disabled
Store password using reversible encryption for all users in the
domain=disabled

we want to change 2 things as this the customer wishes:

Minimum password length=6 characters
Password must meet complexity requirements=enabled

OK, we do it, and after a random time (about 1 minutes to 10 minutes or more)
the policy is again like the old one.
I see in SecurityEventLog, that system-user reset this to the old policy.
Any idea?
Policy change works well in Test-Enviroment. I can't understand why this in
production enviroment, the 2 domain are comletley same.
Also I've changed about 5 months ago the policy:
Maximum password age
from default 42 days to 999 days, and that was not a problem.
we have disabled Norton, Tivoli, any other things, that could be a problem,
but nothing.
we consult microsoft premium support, they have no idea there.
any help from you?
thanks a lot

Relevant Pages

  • Re: Password complexity policy not being enforced
    ... I am actually referring to the Domain Security Policy. ... affect any local user account that is logging ...
    (microsoft.public.win2000.group_policy)
  • Re: Which overrides? AD or Domain Security Policy?
    ... yes...password never expires and cannot change password overrides the settings on default domain policy GPO password settings ... it to the Domain Security Policy so it globally affects all users - but limit ...
    (microsoft.public.windows.server.active_directory)
  • Re: using vbscript to edit Domain Security policy Complex Password setting
    ... AFAIK there is no public programmatic way to set that policy. ... > it fails to meet the new default complexity passwords settings in Win ... > the password and then re-enable the domain security policy. ... > automate somewhere in the script a way of disabling the complexity ...
    (microsoft.public.windows.server.scripting)
  • Re: adding workstations to a Win2k domain
    ... This should be define in Domain Security Policy. ... "John" skrev i meddelandet ... >> I am trying to delegate permissions to allow a group of people to add ...
    (microsoft.public.windows.server.active_directory)
  • Re: Changed Domain Security Policy not changing
    ... I have set my domain security policy to no define passwords, no history, ... you have to keep the settings defined, but adjust their content to your needs, e.g. have require complexity defined but disabled, passwordlength defined but set to 0, ... ... Default DCs or any other policy would only affect local user accounts for the computers which the policy applies to. ...
    (microsoft.public.windows.server.active_directory)