Re: Tough password question!



Forgive me if I am wrong, but I think that is not quite right!

Windows 2000 / 2003 supports passwords up to 28 chars in length, the option
of up to 14 chars only refers to the max length that can be forced by group
policy.

Also, I get the same results if I set the password to jasonL"" or any
combination which includes the " char.

A password containing " works for local auth. I have now also checked on a
Windows XP client machine and the admin whose password contains " cannot log
in to that either!

Thanks for the article link though - I'll have a read in it for more clues.

Jason

"Ace Fekay [MVP]" wrote:

> In news:A4ECA5D6-5D07-4D75-9EEB-A73CF432B4AB@xxxxxxxxxxxxx,
> J Lloyd <JLloyd@xxxxxxxxxxxxxxxxxxxxxxxxx> stated, which I commented on
> below:
> > I have a Windows 2003 Native mode domain & forest. I am joining a
> > 2000 member server to it. It will not accept the domain
> > administrator username and password which is 15 characters long and
> > complicated including non-alpha chars to join the domain.
> >
> > If I change the password to something shorter like Password1 it
> > works. When I reboot the server, it will not login when the admin
> > password is reset to the hard password. It will login locally with
> > this password set to the local admin account, or to a domain user
> > account and it will login if I change the domain admin password to
> > the simple example above.
> >
> > No event log issues on either the (single) DC or server. It is not a
> > keyboard / languange issue as I type the password in to the username
> > box it and looks correct.
> >
> > I am stumped as to why this can be! The password is okay when used
> > on a normal user account, or even another domain admin. If the
> > Administrator account is set to this password, it cannot login. It
> > doesn't make sense...
> >
> > Somebody please save me from insanity!! Thanks.
>
> 15 characters is too long. 14 is the max
>
> Step-by-Step Guide to Enforcing Strong Password Policies:
> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/directory/activedirectory/stepbystep/strngpw.mspx
>
> You'll need to reset the password and follow the maximum length allowed of
> 14 characters.
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> If you are having difficulty in reading or finding responses to your post,
> instead of the website you are using, I would suggest to use OEx (Outlook
> Express or any other newsreader of your choosing), and configure a newsgroup
> account, pointing to news.microsoft.com. This is a direct link into the
> Microsoft Public Newsgroups, and it is FREE and DOES NOT require a Usenet
> account with your ISP. With OEx , you can easily find your post and watch &
> track threads, sort by date, poster's name, watched threads or subject.
>
> Not sure how? It's easy and you'll enjoy it
> How to Configure OEx for Internet News
> http://support.microsoft.com/?id=171164
>
> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
> Microsoft MVP - Windows Server Directory Services
> Microsoft Certified Trainer
> Assimilation Imminent. Resistance is Futile.
> Infinite Diversities in Infinite Combinations.
> =================================
>
>
>
.



Relevant Pages

  • Re: security log + unauthorized lgons?
    ... Login to my SBS 2003 SP1 premium server remotely and had an ... Who else besides you has the admin access/passwords? ... account login is due to normal maintenance? ...
    (microsoft.public.windows.server.sbs)
  • Re: Domain admin login problem
    ... Several Login attempt wrote: ... Administrator Account. ... How can you logon to the DC as a Local Admin? ...
    (microsoft.public.windows.server.active_directory)
  • Re: security log + unauthorized lgons?
    ... I read a best practice white paper once about renaming the admin account. ... security log shows users Anonymous logon, ... account login is due to normal maintenance? ...
    (microsoft.public.windows.server.sbs)
  • Help;using apps across user accounts?
    ... i have recently dont some work on stepping up my XP pro security. ... not all the software which was installed in my admin account is ... settings,next time i login i have to set it up again,it doesnt seem to ...
    (microsoft.public.windowsxp.help_and_support)
  • Amazon.com Password limit
    ... it lets me login. ... for amazon is 8 chars. ... trying to bruteforce a account since he knows max ...
    (Bugtraq)