Re: Administrator resetting password

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 06/29/04 

Date: Mon, 28 Jun 2004 23:47:05 GMT

Check your domain password policy in the Domain Security Policy or if you have more
than one GPO for the domain check the highest GPO in the domain in the list. You can
use "net accounts" on a domain controller to see what your account policy is other
than complexity. If you don't want complexity enabled make sure it is disabled and
not undefined. You do not want any undefined settings in you account policies. ---
Steve

"RB" <RB@discussions.microsoft.com> wrote in message
news:672E20A4-EBDD-4700-8AB5-10B66CA41240@microsoft.com...
> I have a problem with an application that executes on the admin ID for resetting
the password in AD...which I discovered was not working...so I tested the access
rights with the AD Users and Computers console and tried a reset with the admin ID
there too by right-clicking the user....nothing doing there either. Times out with an
error that tells me there might be a password history, complexity or minimum length
problem. I have made NO changes to the Policies....any ideas ?

Relevant Pages

  • Re: Group Policy
    ... but somehow that policy doesn't take effect on those computers although ... I set the policy setting to "DISABLED" for the policy named "Password must ... meet complexity requirements". ... In a domain -- there can be only one password (account) policy and this ...
    (microsoft.public.windows.server.security)
  • Re: GPO causing client security logs to fill?
    ... a virus in play. ... settings to be applied on your client workstations. ... Group Policy is a complex and often misunderstood beast. ... I modified the account ...
    (microsoft.public.windows.server.sbs)
  • Re: The local policy of this system does not permit you to logon i
    ... Security policies were propagated with warning. ... Error 0x534 occurs when a user account in one or more Group Policy objects ... I have checked the security policies & the administrator profile is not ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO causing client security logs to fill?
    ... Unlink the Default Domain Controller Policy (As it was not previously ... settings to be applied on your client workstations. ... I modified the account ... So basically, the Account lockout threshold, account lockout ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO causing client security logs to fill?
    ... Possibly delete the Default Domoan Controller Policy (As it did not ... issues as it was about recoverying from a virus which appears to ... with client logon failures. ... I modified the account ...
    (microsoft.public.windows.server.sbs)