Re: Disallow blank passwords

Your policy isn't being applied right, you need to google for docs on troubleshooting GPOs and start digging. Start with GPRESULT on a DC.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm



steve0117 wrote:
I just used net accounts comand and it shows password lenght as 0

"steve0117" wrote:

Thanks for your reply.

It is set there as well for a minimum of 8 characters. I have set it every where I can find but nothing works.
Do I need to set the complexity option?

"Paul Adare" wrote:

In article <ED2177E9-42A6-4721-B371-EE77F9E0384D@xxxxxxxxxxxxx>, in the microsoft.public.win2000.security news group, =?Utf-8?B?c3RldmUwMTE3?= <steve0117@xxxxxxxxxxxxxxxxxxxxxxxxx> says...

I have two Windows 2000 DC's with the Domain Controller Policy set with a minimum password lenght of 8 characters.
Is there something I'm missing?
How are the users still allowed to enter blank passwords?

You're setting the password policy in the wrong place, it needs to be set at the domain level, not at the domain controller level. You want the Default Domain Policy GPO.

--
Paul Adare - MVP Virtual Machines
It all began with Adam. He was the first man to tell a joke--or a lie. How lucky Adam was. He knew when he said a good thing, nobody had said it before. Adam was not alone in the Garden of Eden, however, and does not deserve all the credit; much is due to Eve, the first woman, and Satan, the first consultant." - Mark Twain

.

Relevant Pages

  • Re: SBS 2003 Lost all the Security Policies.
    ... i didn't use dcgpofix i used another sbs 2003 premium has example and created the policies manually. ... I know that your Default Domain Controller Security Policy or Domain Security Policy it is empty. ... DCGPOFIX.EXE will restore the Default Domain Policy and the Default Domain Controller Policy to original default settings. ...
    (microsoft.public.windows.server.sbs)
  • Re: W2K Server / XP Pro Clients / Group Policy -- LOCK TASKBAR
    ... make your dns configuration is correct in that domain controllers point ... The policy you are trying to implement is a "user" configuration policy and therefore ... > machines connecting to a Windows 2000 Domain Controller. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: W2K Server / XP Pro Clients / Group Policy -- LOCK TASKBAR
    ... make your dns configuration is correct in that domain controllers point ... The policy you are trying to implement is a "user" configuration policy and therefore ... > machines connecting to a Windows 2000 Domain Controller. ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: W2K Server / XP Pro Clients / Group Policy -- LOCK TASKBAR
    ... make your dns configuration is correct in that domain controllers point ... The policy you are trying to implement is a "user" configuration policy and therefore ... > machines connecting to a Windows 2000 Domain Controller. ...
    (microsoft.public.windows.server.active_directory)
  • Re: W2K Server / XP Pro Clients / Group Policy -- LOCK TASKBAR
    ... make your dns configuration is correct in that domain controllers point ... The policy you are trying to implement is a "user" configuration policy and therefore ... > machines connecting to a Windows 2000 Domain Controller. ...
    (microsoft.public.windows.server.security)