Re: Users unable to change password

From: Derek Melber [MVP] (derekm_at_braincore.net)
Date: 04/09/04 

Date: Fri, 9 Apr 2004 13:55:01 -0700

This will give you direction to which GPO is causing the complexity
requirements. Most likely, it is either on the local computer, or at some OU
level. The RSoP should tell you which GPO is configuring the password
complexity, then you can go and remove it. 

-- 
Derek Melber
BrainCore.Net
derekm@braincore.net
"John Felts" <jfelts@seriousmagic.com> wrote in message
news:u5WFZtmHEHA.3556@TK2MSFTNGP10.phx.gbl...
> Was this a proposed solution? I dont get it...
>
>
>
>
> "Matt Hickman" <hemo_jr@space.com> wrote in message
> news:ce9a9081.0404082013.6e06dc43@posting.google.com...
> > "John Felts" <jfelts@seriousmagic.com> wrote in message
> news:<uyEfB9ZHEHA.2836@TK2MSFTNGP11.phx.gbl>...
> > > I have a domain policy set to only enforce 6 character passwords,
> password
> > > complexity is disabled. However when users try to change their
passwords
> > > using CTRL-ALT-DEL they are getting errors that it does not meet the
> > > requirements. I am able to manually change the passwords on the domain
> using
> > > AD users and computers mmc, but its not working for the users
> themselves.
> >
> >
> > Run the RSOP on one of the affected user objects in the ADU&C.  Right
> > click on the user, select "all tasks", then "Resultant Set of Policy
> > (Logging)". This can also be done with the gpresult executable at the
> > command line.
> >
> > http://support.microsoft.com/default.aspx?scid=kb;en-us;323276
> >
> > -- 
> > Matt Hickman
> >   ...malorientation can be extreme no matter how much we lackweight
> >   the shock.
> >                          Robert A. Heinlein (1907 - 1988)
> >                          _The Door Into Summer_ 1956
>
>

Relevant Pages

  • Re: GPOs for Local Password Policies
    ... Differing account policies is a major reason for creating another domain. ... > I have a default domain GPO defining "Passwords must meet complexity ... and several other settings with No Overrride set. ... > small collection of PCs that should not have password complexity set - ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Password Policy Problem
    ... You can't just disable the GPO - you have to undo the policy setting. ... A GPO was created to require password complexity requirements. ... When I go to AD Users and Computers and reset password, it always asked for the complexity requirement. ...
    (microsoft.public.win2000.active_directory)
  • Re: GPO Password Policy Problem
    ... What event would cause GPO to be applied by the DCs? ... and change the policy setting that requires password ... > A GPO was created to require password complexity requirements. ...
    (microsoft.public.win2000.active_directory)
  • GPO Help
    ... On my 2003 server with AD these are my current GPO ... settings I know they are not what someone would normally ... try and create a user is " Windows cannot set password ... complexity, and password history requirements. ...
    (microsoft.public.windows.server.active_directory)