Re: NT4 password limited to 14 characters ?



Here is what I did, just to be sure that it is the right method to disable LM hash :
On my PDC (NT4 Sp6a),

I have created a DWORD value (LMCompatibilityLevel) on HKEY_LOCAL_MACHINE\System\CurrentControlSet\control\LSA
with Value = 5 (Refuse LM and NTLM)

and

NtlmMinServerSec and NtlmMinClientSec (DWORD) on MSV1_0 with 0 as value.

Then I have restarted the PDC.

When I try to change the password from usrmgr, damewarent utilities or through a 2000 workstation, I always have an error saying that the password does not meet the password policy requirements but it's false :D

If I set "12345678901234" as password it works.
If I set "123456789012345" I have the message quoted above. (Same issue with a real complex password like IL0veLMH@shP@ssw0rd! )

This is quite strange because I have never really seen some people complaining about this limitation.

Thank you



OT but I must say: I like your style, George.

On Jul 16, 2:57 pm, "George Valkov" <a...@xxxxx> wrote:
Error lookup: 2245
{
The password does not meet the password policy requirements. Check the
minimum password length, password complexity and password history
requirements.}

Try a more complex password like this:
aBcD1234.$#~9012@!-+789

--
Pascal


.



Relevant Pages

  • Re: NT4 password limited to 14 characters ?
    ... I have made a new test where I forced my 2k client to use only NTLMv2 method (lmcompatibilitylevel to 3) while the LMcompatibility level was at 5 on my PDC NT4 Sp6. ... When I try to change the password from usrmgr, damewarent utilities or through a 2000 workstation, I always have an error saying that the password does not meet the password policy requirements but it's false ... (Same issue with a real complex password like IL0veLMH@shP@ssw0rd! ...
    (microsoft.public.windows.server.security)
  • Re: NT4 password limited to 14 characters ?
    ... I have made a new test where I forced my 2k client to use only NTLMv2 method (lmcompatibilitylevel to 3) while the LMcompatibility level was at 5 on my PDC NT4 Sp6. ... When I try to change the password from usrmgr, damewarent utilities or through a 2000 workstation, I always have an error saying that the password does not meet the password policy requirements but it's false:D ... (Same issue with a real complex password like IL0veLMH@shP@ssw0rd! ...
    (microsoft.public.windows.server.security)