Password restrictions enforecement

I'm trying to create a user with a short username and a 7 letter,
non-complex password on a Win2K3 domain controller in a test
environment. I have modified account policies/password policies in
both domain and domain controller policies so enforcement is disabled
or not defined. The domain controller is in the default DC container.
I have refreshed using gpupdate and I have restarted the box and
carefully looked for any other switches I might need to turn off but
find none.

Can someone help?

BTIA
Michael

Use GPMC to check resultant policy for container.

--
Eugene Byelyakov,
NSW, Australia

MCSE, CCEA, SCSA, CCNA

Also, Domain Password policies are only read from the Default Domain policy.
You need to have something defined for them there (Enabled with a value or
disabled) and also the Default Domain Policy needs to apply to the DCs as
well. Otherwise the DCs will not pick up any changes and go with the last
defined policy settings. You can verify most of the password settings by
doing "net accounts", however it doesn't show the password complexity.

This article would apply even to 2k3.
269236 Changes Are Not Applied When You Change the Password Policy
http://support.microsoft.com/?id=269236

--
Gary Mudgett, MCSE, MCSA
Windows 2000/2003 Directory Services

================================================== ===
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.

If you disable to Policy setting then it will remain the same. Use Net
Accounts to verify this. Change the settings to account password policies in
the default domain policy only. If they are not defined set them to reflect
the level you want. Force group policy and then verify with Net Accounts.

--
"This posting is provided "AS IS" with no warranties, and confers no
rights."

Thanks, I made the specific zero value changes and it worked. I
didn't realize that 'dis-abling' doesn't really disable.

Many thanks.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode test 33Switch to Hybrid Mode Switch to Threaded Mode

2 24th April 20:01 aspen External User Posts: 1	Password restrictions enforecement Use GPMC to check resultant policy for container. -- Eugene Byelyakov, NSW, Australia MCSE, CCEA, SCSA, CCNA

5 24th April 20:01 news External User Posts: 1	Password restrictions enforecement Thanks, I made the specific zero value changes and it worked. I didn't realize that 'dis-abling' doesn't really disable. Many thanks.