Re: Can't change security policy

"rindi" <rindi@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:42B4F95E-77FC-470E-B43A-02389FAF3094@xxxxxxxxxxxxxxxx
> I've just installed SBS2003 server with integrated SP1. Users can't login
> from the network and also the default password strength is too high. I
> can't
> seem to be able to change any such settings. When I use the security rules
> for domains or the security rules for domain controllers, whenever I try
> to
> save changes, I get an error:
>
> "An extended Error occured, not saved
> \\domain\sysvol\domain\Policies\{.......}\Machine\microsoft\WindowsNT\SecEdit\GptTmpl.inf."
>

There is no such thing as "password strength is too high". Please do not
attempt to lower your security level below a reasonable 7-char/3 char
groups/42 days lifetime setting. A passphrase should ideally be at least 15
characters in length and comprosed of 3 or 4 character groups. Anything
shorter can and will be cracked in a matter of seconds using the right
equipment that I do possess.

We also need to review the output of netdiag and dcdiag to find out why you
have the group policy issues on an allegedly brand new server. SBS takes
practice to install and configure properly, and I do not recommend using the
very first deployment in production due to issues such as this one.
--
Leonid S. Knyshov, CEO
Crashproof Solutions, LLC - http://www.crashproofsolutions.com
MCP Exchange 2003/Small Business Server 2003, CCNA, SCSA 8
Microsoft Small Business Specialist Partner


.

Relevant Pages

  • Re: New Event Log Errors!
    ... Somehow along those lines I'd also installed the Certificate Authority ... Did you apply the last Server Pack for SBS Server? ... Please install Windows Support Tools on the win2k3 sp1 problematic ... Microsoft is providing this information only as a convenience to you: ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot activate SBS 2003 SP2
    ... everywhere and sitting on the case of the server is the old board - balanced ... slip stream SBS you would have had it ages ago. ... My main reason for slipstreaming the install is because I cannot get ... updates that need to be applied if one is to have a succesful outcome ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot activate SBS 2003 SP2
    ... everywhere and sitting on the case of the server is the old board - balanced ... slip stream SBS you would have had it ages ago. ... My main reason for slipstreaming the install is because I cannot get ... updates that need to be applied if one is to have a succesful outcome ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot activate SBS 2003 SP2
    ... the old array was a raid 5 that should not have become so rooted but the twit who built the server did not actually enable the spare drive to act as a spare!! ... The problem is SBS is unique and I've rarely if ever seen it work. ... The server has been chugging away in a small business environment for several years and I have administered it for them for about a year making sure that the updates were installed and their mailboxes were managed etc etc. ... My main reason for slipstreaming the install is because I cannot get the original 2003 server install to cope with the new hardware and it falls over part way into the install - BSOD bit. ...
    (microsoft.public.windows.server.sbs)
  • unsubmit
    ... Using a development server also [Roberto ... Can't find cable Internet connec [Roberto ... You can fix that manually by 'apt-get install ... > development machine, so if the production server goes down, we can ...
    (Debian-User)
Loading