Re: Administrator resetting password

From: RB (RB_at_discussions.microsoft.com)
Date: 06/29/04

  • Next message: Paul Adare - MVP - Microsoft Virtual PC: "Re: Administrator resetting password" 
    Date: Tue, 29 Jun 2004 02:47:01 -0700

    Hi Steven...
    I did as you suggested and removed all the 'Undefined' settings in the GPO for the Account Policy at the Domain level....no change :-(
    I have looked into the GPO for the DC also and taken all the Undefined settings out too but that had no influence either. Is there a document witha list of all the defaults that I can reset from the start since I don't think there is a way to reset everything back to default until 2003.
    The most confusing part about this is that it just came out of nowhere and I still cannot reset the users password with a right click...Reset Password !
    Thanks...Richard

    "Steven L Umbach" wrote:

    > Check your domain password policy in the Domain Security Policy or if you have more
    > than one GPO for the domain check the highest GPO in the domain in the list. You can
    > use "net accounts" on a domain controller to see what your account policy is other
    > than complexity. If you don't want complexity enabled make sure it is disabled and
    > not undefined. You do not want any undefined settings in you account policies. ---
    > Steve
    >
    >
    > "RB" <RB@discussions.microsoft.com> wrote in message
    > news:672E20A4-EBDD-4700-8AB5-10B66CA41240@microsoft.com...
    > > I have a problem with an application that executes on the admin ID for resetting
    > the password in AD...which I discovered was not working...so I tested the access
    > rights with the AD Users and Computers console and tried a reset with the admin ID
    > there too by right-clicking the user....nothing doing there either. Times out with an
    > error that tells me there might be a password history, complexity or minimum length
    > problem. I have made NO changes to the Policies....any ideas ?
    >
    >
    >

  • Next message: Paul Adare - MVP - Microsoft Virtual PC: "Re: Administrator resetting password"

    Relevant Pages

    • Re: GPOs for Local Password Policies
      ... Differing account policies is a major reason for creating another domain. ... > I have a default domain GPO defining "Passwords must meet complexity ... and several other settings with No Overrride set. ... > small collection of PCs that should not have password complexity set - ...
      (microsoft.public.win2000.group_policy)
    • Re: Users unable to change password
      ... This will give you direction to which GPO is causing the complexity ... Most likely, it is either on the local computer, or at some OU ... I am able to manually change the passwords on the domain ...
      (microsoft.public.windows.server.active_directory)
    • Re: GPO Password Policy Problem
      ... You can't just disable the GPO - you have to undo the policy setting. ... A GPO was created to require password complexity requirements. ... When I go to AD Users and Computers and reset password, it always asked for the complexity requirement. ...
      (microsoft.public.win2000.active_directory)
    • Re: GPO Password Policy Problem
      ... What event would cause GPO to be applied by the DCs? ... and change the policy setting that requires password ... > A GPO was created to require password complexity requirements. ...
      (microsoft.public.win2000.active_directory)
    • GPO Help
      ... On my 2003 server with AD these are my current GPO ... settings I know they are not what someone would normally ... try and create a user is " Windows cannot set password ... complexity, and password history requirements. ...
      (microsoft.public.windows.server.active_directory)