Re: password complexity requirement
- From: "Paul Bergson" <pbergson@xxxxxxxxxx>
- Date: Wed, 14 Dec 2005 10:17:48 -0600
This means the password was recently changed and you need to wait the
minimum password age before it can be changed again, which is set to 25
days. That is a brutally high amount, usually i have seen 3 to 5 days.
As a domain admin you could go in and reset the password before the 25 days
has expired.
--
Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
This posting is provided "AS IS" with no warranties, and confers no rights.
"Ramon Niese" <ramon@xxxxxxxxxxx> wrote in message
news:ukGNQVMAGHA.3864@xxxxxxxxxxxxxxxxxxxxxxx
> Hi Neil,
>
> I tried using different passwords but now we have the following error
> message continuously:
> "cannot change password for this account at this time."
>
>
> I will see what google has to say here..
>
>
>
> Ramon
>
>
>
>
>
>
>
> "Neil Ruston" <NeilRuston@xxxxxxxxxxxxxxxxxxxxxxxxx> schreef in bericht
> news:FF57CB5E-153E-48BD-9CA3-CFCC29B58A48@xxxxxxxxxxxxxxxx
>> 1. The prompt to change a password is set elsewhere in the GPO. [local
>> policies/security options/prompt user to change...]
>> 2. The password below may be blocked since it contains the word "jan"
>> and/or
>> you have a password filter installed on the DCs.
>>
>> Have you tried other passwords which you believe do meet the
>> requirements?
>> The above should be simple to prove one way or the other.
>>
>> neil
>>
>>
>>
>>
>> "Ramon Niese" wrote:
>>
>>> Hi,
>>>
>>> We made the setting for password complexity requirements as follows:
>>> - Enforce password history (10 passwords)
>>> - Maximum password age (30 days)
>>> - Minimum password age (25 days)
>>> - Minimum password length (6 characters)
>>> - Password must meet complexity requirements (enabled)
>>> - Store passwords using reversable encryption (disabled)
>>>
>>> We have a user who receives a message that her password will expire in
>>> 13
>>> days??? (is this normal when we have the above settings)
>>> If this users chooses to change the password he wants to change his
>>> password
>>> to "Njan26!".
>>> If he clicks OK he receives the error that this password doesn't meet
>>> the
>>> complexity requirements???? I also checked this for another user
>>> and he also can't change his password with the same message.
>>>
>>> First we had a w2000 domaincontroller in our 2000 domain. A couple of
>>> weeks
>>> ago we installed 2 new domaincontrollers w2003 and transferred all the
>>> fsmo
>>> roles
>>> to these new domaincontrollers. We haven't demoted the old
>>> domaincontroller
>>> yet.
>>>
>>> If I look at the local policy on the w2000 clients I see the the
>>> "active"
>>> policy is the correct domain policy.
>>>
>>> Has anyone got an idea???
>>>
>>> Ramon
>>>
>>>
>>>
>
>
.
- Follow-Ups:
- Re: password complexity requirement
- From: Joe Kaplan \(MVP - ADSI\)
- Re: password complexity requirement
- References:
- password complexity requirement
- From: Ramon Niese
- RE: password complexity requirement
- From: Neil Ruston
- Re: password complexity requirement
- From: Ramon Niese
- password complexity requirement
- Prev by Date: Re: Setting Up AD (&GPO) Newbie Question
- Next by Date: Re: JUD10 Computer Account Drops from Active Directory
- Previous by thread: Re: password complexity requirement
- Next by thread: Re: password complexity requirement
- Index(es):
Relevant Pages
|