Re: Password Policy & Complexity

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 05/17/04 

Date: Mon, 17 May 2004 16:19:42 GMT

"All password policies"? There is only one password policy for domain users in a
domain and that is at the domain level in Domain Security Policy by default. If you
have more than one Group Policy configured at the domain level then configure your
password policy at the top GPO in the list and set complexity to disabled there. Also
make sure you do not have "block inheritance" enabled on the domain controller
container or any password policy changes at the domain level may not take effect. For
local computer accounts only, you can configure them to have a different password
policy in the domain by placing a computer in an OU and then configuring a GPO for
that OU to have different password policy than the domain. --- Steve

"Michael334" <michael@arafura.net.au> wrote in message
news:de8d01c43c12$40a37ab0$a401280a@phx.gbl...
> I have a windows 2000 server SP$, updated to all current
> patches, Runs Exchange 2000 SP3 and ISA Server SP1.
>
> I have reset all password policies to either being
> disabled or set to minimum, i have reset the policies in
> the group policies yet the server still is looking for
> some level of password complexity as the users cannot set
> either no password or a basic password.
>
> There are many articles i have read in relation to this
> with no success, any assistance would be appreciated.

Relevant Pages

  • Re: To those who designed Group Policy in Active Directory
    ... > policy(applied at domain level) and the strict password policy (applied to ... > the OU) were applying to that computer account. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Where to set the domain password policy up?
    ... Account Policies applied to Domain Controllers apply to all accounts stored on domain controllers - that is, to all domain accounts in that domain! ... I'd say apply at the domain level still - to have consistent policy for domain accounts in the domain as well as for local accounts on all computers in that domain. ... > Is it better to set a domain password policy up at the domain node level ...
    (microsoft.public.windows.server.active_directory)
  • Re: Strong password policy not applying?
    ... > Password policy for domain users can only be applied at domain level and ... > there are no exceptions - think of it as having a built in no override. ...
    (microsoft.public.win2000.group_policy)
  • Re: Changing Time Issue / Password Question
    ... You can't set password policy at the OU level, it can only be set at the domain level and will impact all accounts in the domain. ... Reset the main Domain GPO password policy not to be complex did a gpupdate /force and then I was able to have a lower case password in a seperate OU. ... I uncheck the box to automatically adjust clock for daylight savings time because on Saturday night I do not want to the clock to change. ... So I created a GPO and set it not to inherit and did a gpupdate /force but it still makes me create a complex password with upper and lower case for this one user account? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Multiple password policies for ONE domain?
    ... and the last password policy evaluated will "win". ... You can only have one account policy at the domain level. ... password policies for one domain? ... If multiple GPOs could be used, what will be the behavior of having 2-3 ...
    (microsoft.public.windows.server.active_directory)