Re: Complex Passwords Won't Go Away
From: Kerry Hoskin (kjho_at_pml.ac.uk)
Date: 02/18/04
- Next message: Wally: "GPMC"
- Previous message: Giacomo: "Software Restriction not working!"
- Messages sorted by: [ date ] [ thread ]
Date: Wed, 18 Feb 2004 14:28:38 -0000
David is spot on, I had this problem for ages, until I removed the Block
inheritance from the DC's OU, everything worked fine from then on. Once the
change has been replicated you can always put the block back on, we keep a
block on our DC's OU to stop any changes on the default domain policy
screwing things up by mistake
Kerry
"David Chadwick" <david@opticsenses.com> wrote in message
news:ef0b3f99.0402161405.3e2b2b08@posting.google.com...
> Hi ds,
>
> "ds" <ds0934@hotmail.com> wrote in message
news:<114e101c3f497$e83aea00$a501280a@phx.gbl>...
>
> > everything from scratch, new domain, etc.): Default
> > Domain policy was set to use complex passwords. Then we
> > turn that off and set min password length to 0. Try to
> > add a user account with either a blank password, or a
> > password of a length less than what the old policy used
> > to require (7 chars). Every time, it refuses to add the
> > user account saying "does not meet minimum password
> > requirements for complexity or min length..." or
>
> I had a similar problem in all of my test labs too, until I realised
> it was something that I was doing as part of my standard test lab
> setup. It's probably not the issue with you, but I thought I would
> throw it out there just in case.
>
> Everytime I built a test lab I would go to the "Domain Controllers" OU
> and block policy inheritance. I would then create a GPO link directly
> to the DC OU with the Default Domain Policy, figuring that even though
> it was no longer inheriting it from above it would still work as I had
> assigned it to the GPO directly.
>
> Whenever I did this I had password changing problems like you are
> experiencing. It seems that assigning the GPO directly to the OU is
> not enough, it MUST inherit it from the domain level above. As soon
> as I removed the block inheritance setting on the DC OU everything was
> fine again.
>
> Perhaps you happen to be doing the same thing?
>
> Cheers,
> David
- Next message: Wally: "GPMC"
- Previous message: Giacomo: "Software Restriction not working!"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
