Re: Trouble with userpassword / Group-policy

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Mark Renoden [MSFT] (markreno_at_online.microsoft.com)
Date: 07/28/04 

Date: Thu, 29 Jul 2004 08:28:59 +1000

Hi

The password policy is set at the domain level in the Default Domain Policy
under Computer Configuration -> Windows Settings -> Security Settings ->
Account Policies -> Password Policy.

You should probably leave (or even strengthen) the password policy as good
practice and simple use passwords that meet the requirements:

The following is a good guide regarding passwords:

    http://www.microsoft.com/smallbusiness/gtm/securityguidance/articles/select_sec_passwords.mspx

Kind regards 

-- 
Mark Renoden [MSFT]
Windows Platform Support Team
Email: markreno@online.microsoft.com
Please note you'll need to strip ".online" from my email address to email 
me; I'll post a response back to the group.
This posting is provided "AS IS" with no warranties, and confers no rights.
"Gunnar" <gunnar@delmo.no> wrote in message 
news:OfihnGOdEHA.3512@TK2MSFTNGP12.phx.gbl...
> Please help...!!
> I have set up a new W2003 server, made all configurations, and activated 
> the
> Active Directory. Then... when i make new user-acounts, and try to set
> password on them,
> I get the following message:
> "Windows cannot complete password for the <acount> because:
> The password does not meet the password policy requirements. Check the
> minimum password length. password
> complexity and password history requirements."
>
> I have been in all places i can find regarding Policy-setup ( in
> Usermanager, in the OU, Administrative Tools and so on ), and tryed
> every possible settings there, but nothing helps.
> Is there anything I have overlocked when I activated the Active Directory,
> should I try to reinstall Active Directory, or what?
>
> Please help me with this
>
> mvh Gunnar
>
>
>

Relevant Pages

  • Re: To those who designed Group Policy in Active Directory
    ... > policy(applied at domain level) and the strict password policy (applied to ... > the OU) were applying to that computer account. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Where to set the domain password policy up?
    ... Account Policies applied to Domain Controllers apply to all accounts stored on domain controllers - that is, to all domain accounts in that domain! ... I'd say apply at the domain level still - to have consistent policy for domain accounts in the domain as well as for local accounts on all computers in that domain. ... > Is it better to set a domain password policy up at the domain node level ...
    (microsoft.public.windows.server.active_directory)
  • Re: Changing Time Issue / Password Question
    ... You can't set password policy at the OU level, it can only be set at the domain level and will impact all accounts in the domain. ... Reset the main Domain GPO password policy not to be complex did a gpupdate /force and then I was able to have a lower case password in a seperate OU. ... I uncheck the box to automatically adjust clock for daylight savings time because on Saturday night I do not want to the clock to change. ... So I created a GPO and set it not to inherit and did a gpupdate /force but it still makes me create a complex password with upper and lower case for this one user account? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Minimum password lenght GPO setting
    ... Without at least 2008 functional levels you are only able to set a password policy on domain level in Active directory. ... policy have on users as I have enabled it but clients are all logging ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain - enforce password policy
    ... Maximum password age 45 ... Only on domain level with the highest precedence all users will get the Password Policy. ... The way you linked the policy with Password settings -- to an OU - the local machine accounts will get the password policy (if computer accounts are in the OU, since those are Computer Configuration settings). ...
    (microsoft.public.windows.group_policy)