problem with password policy in OUs!!
Hello
I have recently setup a new domain using Windows 2008.
When i create users in the OUs following:
"The password does not meet the password policy requirements. Check the minimum password length, password complexity and password history requirements."
I change policy password in OUs but message top error.
if i change policy password in the default domain policy have not problem
please help me.
Re: problem with password policy in OUs!!
I think you are missing something. I am providing complete steps to define a password policy. Hope this steps will help you.
- Go in Administrative Tools > Domain Security Policy > Security Settings > Account Policies > Password Policy.
- Right click on password length > Properties.
- See that the tick for Define this policy setting check box is not removed. Set the value to 0 below which will remove the password requirement.Give OK.
- Right click on Passwords must meet complexity > Properties.
- Ensure that Define this policy setting check box is selected. And below that click on disabled. By this you are enabling simple password.
- Once you are done with this click on start > Run > cmd. You will need to run the command to enable new Password Policy.
- Give the command gpupdate /force and hit enter.
Re: problem with password policy in OUs!!
So, as you have experienced, applying password policies at the OU level do not affect domain users. If you take a look at a GPO, you will notice that password policies are stored in the Computer configuration section of the policy, not the user section. Therefore, when you linked this policy to the OU, it actually applied to the computer objects in that OU. Therefore, the password policy affected local users on those computers. Try it... apply the GPO to the OU and see how it affects the local users accounts defined on the target users.
Therefore, if you want to apply password policies to domain users, you need to link the GPO to the domain object. The Domain Controllers read this policy and apply the settings to their domain users.