Disable password complexity rules

First of all, I thought for sure I posted this question to this same
board last night, but can't find it anywhere. Forgive me if I double-
posted. I did try to find it.

We are implementing a web app that users will be able to change their
own passwords, and accounts can be unlocked by certain users. This
app will also be managing all of our password requirements, age,
history, complexity, etc, so I need to turn those rules off in the
Default Domain Policy. All of the password policies were set
(Password history, Minimum and Maximum Password age, length, and also
complexity. Initially, I set all of these policies to Not Defined,
thinking that would turn them off. It did not however. I did some
googling, and found a suggestion to set them to Defined, but to set
the values to 0. I tried this as well, but I still cannot set my
password to "abc" or something similar. Any other suggestions???

Thanks in advance.

Try issuing gpupdate /force from a commandprompt.

You are right in thinking that Not Defined doesn't remove the restrictions,
btw.

Though, I'm convinced there is a bug in this policy, because I've had
problems with it on virtually every 2003 server I've built. It usually takes
multiple attemtps to change it. Sometimes even after success, it reverts
later.


"Matt" wrote:

> First of all, I thought for sure I posted this question to this same
> board last night, but can't find it anywhere. Forgive me if I double-
> posted. I did try to find it.
>
> We are implementing a web app that users will be able to change their
> own passwords, and accounts can be unlocked by certain users. This
> app will also be managing all of our password requirements, age,
> history, complexity, etc, so I need to turn those rules off in the
> Default Domain Policy. All of the password policies were set
> (Password history, Minimum and Maximum Password age, length, and also
> complexity. Initially, I set all of these policies to Not Defined,
> thinking that would turn them off. It did not however. I did some
> googling, and found a suggestion to set them to Defined, but to set
> the values to 0. I tried this as well, but I still cannot set my
> password to "abc" or something similar. Any other suggestions???
>
> Thanks in advance.
>