Re: GPO Password Policy Problem

From: cjc (cjc_at_discussions.microsoft.com)
Date: 02/21/05 

Date: Mon, 21 Feb 2005 13:29:03 -0800

What event would cause GPO to be applied by the DCs?

"ptwilliams" wrote:

> You can't just disable the GPO - you have to undo the policy setting.
> Enable the GPO, and change the policy setting that requires password
> complexity from enabled to disabled.
>
> The next time this GPO is applied by the DCs they will change the attribute
> that configures this option and the option will no longer be enforced. You
> can then disable the GPO if you like, although most if it won't be applied
> after it's applied originally.
>
>
> --
>
> Paul Williams
>
> http://www.msresource.net/
> http://forums.msresource.net/
>
> "cjc" <cjc@discussions.microsoft.com> wrote in message
> news:5A6DB0EE-F453-4476-A6CA-93FF17FAFC57@microsoft.com...
> A GPO was created to require password complexity requirements. After
> applying the GPO, the policy works. However, I'm not ready to implement it;
> so, I decided to disable it. With the GPO already disabled, the AD still
> demand the complexity requirement. When I go to AD Users and Computers and
> reset password, it always asked for the complexity requirement. Any idea?
>
>
>

Relevant Pages

  • Re: GPO Password Policy Problem
    ... You can't just disable the GPO - you have to undo the policy setting. ... A GPO was created to require password complexity requirements. ... When I go to AD Users and Computers and reset password, it always asked for the complexity requirement. ...
    (microsoft.public.win2000.active_directory)
  • Re: GPOs for Local Password Policies
    ... Differing account policies is a major reason for creating another domain. ... > I have a default domain GPO defining "Passwords must meet complexity ... and several other settings with No Overrride set. ... > small collection of PCs that should not have password complexity set - ...
    (microsoft.public.win2000.group_policy)
  • Re: Users unable to change password
    ... This will give you direction to which GPO is causing the complexity ... Most likely, it is either on the local computer, or at some OU ... I am able to manually change the passwords on the domain ...
    (microsoft.public.windows.server.active_directory)
  • GPO Help
    ... On my 2003 server with AD these are my current GPO ... settings I know they are not what someone would normally ... try and create a user is " Windows cannot set password ... complexity, and password history requirements. ...
    (microsoft.public.windows.server.active_directory)
  • RE: GPO controlled firewall incorrectly ON due to Standard instead of Domain Profile
    ... We do have two DCs in our small domain (50 computers, ... on the DCs), one of which is at another location, but the connectivity is ... According to your description, since "gpupdate /force" can fresh the GPO, I ... Q310353 How to Perform a Clean Boot in Windows XP ...
    (microsoft.public.windows.group_policy)