Administrator can't change password!

From: RobK (robert.kryska_at_lakma.com)
Date: 01/29/04 

Date: Thu, 29 Jan 2004 13:52:33 +0100

Hello
I've got problem:
I'm loggged as Administrator on Domain Controller (Win2000 serv), and I'm
trying to change the password of a user
(or to create a new user). Then the message appears:

"Windows cannot complete the password change because The password does not
meet the password policy requirements. Check the minimum password lenght,
password complexity, and password history requirements"

I go to: Programs\Admin. Tools\Domain Security Policy, checking Password
Policy, set all possitions to 'not defined'.
(enforce password history, maximum password age, minimum pass. age, length,
password must meet complexity req., store password using reversible
encryption)
And nothing

Still can't change password of any user :(

What to do?

Best wishes
RobK (Poland)
P.S.
 About month ago i trying to 'play' with security of terminals, so maybe
then something in that case was set not good
(i think from that time I did nothing with passwords or new users)

Relevant Pages

  • RE: Password History + GPO
    ... keep password history for on Security Policy Setting tab on Group Policy ... Double click on "Enforce password history" and you can then change the ...
    (microsoft.public.windows.server.sbs)
  • RE: Betr.: Minimum password requirements
    ... This policy enables administrators to enhance security by ensuring that old ... To maintain the effectiveness of the password history, ... passwords to be changed immediately when you configure the Minimum password ... default setting does not follow this recommendation, ...
    (Security-Basics)
  • Re: And what will happen when I change the Complexity?
    ... becuase company policy required 8 characters. ... The Microsoft public news server is msnews.microsoft.com and you can ... The user account password is not set to Password Never Expires. ... Get the 'Maximum Password age' value dictated by domain policy, ...
    (microsoft.public.windows.server.sbs)
  • Re: Default Domain Policy - Password Policy
    ... You might want to instead set pwdLastSet to 0 in stages for users to force them to change at next logon and then when that's completed set the max age. ... last set for each user account. ... This means that if you set the initial Maximum Password Age too low, you will likely cause expiration of all passwords - so all users will be prompted to change their passwords at their next logon. ... is there a domain-wide policy setting to expire all passwords? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Default Domain Policy - Password Policy
    ... Is there a way to find the value of domain users' pwdLastSet? ... I will change the Maximum Password Age = 365. ... last set for each user account. ... is there a domain-wide policy setting to expire all ...
    (microsoft.public.windows.server.active_directory)