asked on

Unable to change password complexity policy

Hi all.
I'm running 2003 enterprise server and I can't seem to change my password complexity policy. I was able to change password length and age requirements. I am setting these in the group policy editor by going to AD users and computers and right clicking on the domain then going to the group policy tab. From there I am editing the default domain policy.

Thanks in advance.
Matt
mrlader@cox.net

helpnet

Sounds to me like you are doing the right thing... When you say you can't seem to change password complexity policy, what's happening? An error message? it looks like it changes but doesn't work. The change doesn't stick?

Have you tried refreshing the computer policy (secedit /refreshpoliciy computer_policy, for win2K, or gprefesh for winXP, (and I think Win2003).

mrlader

ASKER

No errors. It looks like it takes and then just doesn't. I have tried refreshing the policy. The command for this is gpupdate in 2k3. Thanks

helpnet

So are you saying the Change doesn't stick (apply it, go back in and its not there?)

Have a look at this

http://support.microsoft.com/default.aspx?scid=KB;en-us;279890&

Wondering if you have the mimimum password length set to six char or more. Is there any event log error messages?

mrlader

ASKER

No the change stays set correctly in the policy but has no effect. Right now min. password length is 0 but will be changed back to 6 where I usually have it set. I wanted to eliminate length as a cause. The event log has no errors in it.

helpnet

ARe you testing with an administrator login, if you are (see the link I posted earlier) the password will be accepted anyway. Test with a user that doesn't have administrator rights.

ASKER CERTIFIED SOLUTION

mdiglio

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

mdiglio

Thank you and I'm glad it worked out for you

dlot

For any newcomers to this topic, try this...

I ran into this exact problem, but realized that although my group policy for the domain had been altered correctly (as was done above), it was getting overrided because the password policy for the system was still in place (gpedit.msc). So check this as well...

In Users and Computers, right click the domain >properties. Group Policy Tab > Click the Options button and check "No Override" which will not let the local policy settings override those of the domain.

Reset your password and you're good to go. Hope this is useful to someone.