Re: Password Policy

Tech-Archive recommends: Fix windows errors by optimizing your registry

Mathieu is right, I did some testing on this and didn't worked, and also
logged errors in event log for that action, I was quite sure that this
worked in some tests some time ago, however it doesn't seem to apply at the
moment.
Sorry about that. Thanks for the correction Mathieu.
--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
"Jorge Silva" <jorgesilva_pt@xxxxxxxxxxx> wrote in message
news:evPLNdP5HHA.5740@xxxxxxxxxxxxxxxxxxxxxxx
calling name ?
Of course not.

It doesn't work on my environnement.
Hum.. tried that some time ago, and it worked.

Does it in your ?
I will have to re-try and check if I miss something.

I tried when reseting password from ADUC and directly on the logged
account.
I even rebooted before
I believe you, probably I miss some step.
--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
"Mathieu CHATEAU" <gollum123@xxxxxxx> wrote in message
news:ORbOcRP5HHA.5316@xxxxxxxxxxxxxxxxxxxxxxx
calling name ?

I know, that's why i tried your solution.
It doesn't work on my environnement.
Does it in your ?
I tried when reseting password from ADUC and directly on the logged
account.
I even rebooted before

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Jorge Silva" <jorgesilva_pt@xxxxxxxxxxx> wrote in message
news:u6%23Sr$O5HHA.6024@xxxxxxxxxxxxxxxxxxxxxxx
Inline

1/I am quite sure you can't
Corect, using the the gpeditor you can't.

2/That would be quite dirty. Editing the gpo may lead to get it
removed.
Dirty? Get removed?
Can you explain that?

Did you know that there are many problems that can only be solved by
manually editing the GPOs, perhaps you should try it before calling
names...
:)
--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
"Mathieu CHATEAU" <gollum123@xxxxxxx> wrote in message
news:uDODxuO5HHA.5360@xxxxxxxxxxxxxxxxxxxxxxx
you meant MaximumPasswordLength=15 ?

That doesn't work on my W2K3 DC...

1/I am quite sure you can't
2/That would be quite dirty. Editing the gpo may lead to get it
removed.


--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Jorge Silva" <jorgesilva_pt@xxxxxxxxxxx> wrote in message
news:uk0pDqO5HHA.4712@xxxxxxxxxxxxxxxxxxxxxxx
Hi
Here's how you can do that:
Identify the policy by its GUID, then go to
%SystemRoot\SYSVOL\domain\Policies\{PolicyGuid}\Machine\Microsoft\Windows
NT\SecEdit

Then open the GptTmpl.inf and change the value of the
MinimumPasswordLength=15
Save changes.
Then in cremente the version policy in
%SystemRoot\SYSVOL\domain\Policies\{PolicyGuid}\GPT.ini

Done!!!

Let me know the results.
Note: If you try to use the GPO editor to change the value the value
will be reversed to 14 chars that is the default behavior.

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
"Mathieu CHATEAU" <gollum123@xxxxxxx> wrote in message
news:%23PVoJIC5HHA.2312@xxxxxxxxxxxxxxxxxxxxxxx
Hello,

open gpmc (gpmc.msc), expand your domain, right click on "Default
Domain policy", click edit

in computer configuration
expand windows settings
Security settings
Account policies
Password policy

Enable "Password must meet complexity requirements"

I think you mean Minimum password length, and not maximum,
edit Minimum password length

occurs next password changes

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Ahmad M. Zahoory" <Ahmad@xxxxxxxxxxxxxxxx> wrote in message
news:E918B8D3-440F-48B4-81D7-1D1E2CD9974E@xxxxxxxxxxxxxxxx
Hi,

We want to implement following Password Policy using Default Domain
Policy.

1. Maximum Password Length : 15 Characters
2. Passwords may not contain your user name or any part of your full
name.

Pl. help me how we can achieve this.
--
Regards,
Ahmad M. Zahoory

E-mail: ahmad.zahoory@xxxxxxxxx











.

Relevant Pages

  • Re: Screensaver Group Policy not working
    ... Jorge Silva ... MCSE, MVP Directory Services ... In that case you should have a conflict Policy at the OU or you have ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password Policy
    ... Mathieu CHATEAUhttp://lordoftheping.blogspot.com ... MCSE, MVP Directory Services ... Identify the policy by its GUID, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Screensaver Group Policy not working
    ... Jorge Silva ... MCSE, MVP Directory Services ... the rsop.msc and check if the policy is being applied correctly. ...
    (microsoft.public.windows.server.active_directory)
  • Re: password issues with new Vista machines
    ... MCSE, MVP Directory Services ... -If domain users there's no difference between Vista and XP, ... -First you need to be sure that the DCs are with the correct policy, ...
    (microsoft.public.windows.server.active_directory)
  • Re: what gpo setting is this?
    ... Jorge Silva ... MCSE, MVP Directory Services ... For that policy you need to create a conflict policy that reverses ...
    (microsoft.public.windows.server.active_directory)