Re: GPO Password Policy Problem

From: ptwilliams (ptw2001_at_hotmail.com)
Date: 02/21/05 

Date: Mon, 21 Feb 2005 21:08:00 -0000

You can't just disable the GPO - you have to undo the policy setting.
Enable the GPO, and change the policy setting that requires password
complexity from enabled to disabled.

The next time this GPO is applied by the DCs they will change the attribute
that configures this option and the option will no longer be enforced. You
can then disable the GPO if you like, although most if it won't be applied
after it's applied originally. 

-- 
Paul Williams
http://www.msresource.net/
http://forums.msresource.net/
"cjc" <cjc@discussions.microsoft.com> wrote in message 
news:5A6DB0EE-F453-4476-A6CA-93FF17FAFC57@microsoft.com...
A GPO was created to require password complexity requirements.  After
applying the GPO, the policy works.  However, I'm not ready to implement it;
so, I decided to disable it.  With the GPO already disabled, the AD still
demand the complexity requirement.  When I go to AD Users and Computers and
reset password, it always asked for the complexity requirement.  Any idea?

Relevant Pages

  • Re: GPO Password Policy Problem
    ... You can't just take them out of scope and ... >> You can't just disable the GPO - you have to undo the policy setting. ... it always asked for the complexity requirement. ...
    (microsoft.public.win2000.active_directory)
  • Re: GPOs for Local Password Policies
    ... Differing account policies is a major reason for creating another domain. ... > I have a default domain GPO defining "Passwords must meet complexity ... and several other settings with No Overrride set. ... > small collection of PCs that should not have password complexity set - ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Password Policy Problem
    ... What event would cause GPO to be applied by the DCs? ... and change the policy setting that requires password ... > A GPO was created to require password complexity requirements. ...
    (microsoft.public.win2000.active_directory)
  • Re: Users unable to change password
    ... This will give you direction to which GPO is causing the complexity ... Most likely, it is either on the local computer, or at some OU ... I am able to manually change the passwords on the domain ...
    (microsoft.public.windows.server.active_directory)
  • Re: GPO Password Policy Problem
    ... What event would caused the DC to apply the GPO? ... "ptwilliams" wrote: ... and change the policy setting that requires password ... it always asked for the complexity requirement. ...
    (microsoft.public.win2000.active_directory)