Results 1 to 13 of 13

Thread: Still can not disable password complexity requirements

  1. #1
    yifli Guest
    We have a domain and two domain controllers running Windows 2003 Server R2
    Enterprise x64 Edition with SP2

    I've disabled password complexity requirements in both default domain group
    policy object and default domain controller group policy object. But I still
    can not create users under User container on one of our domain controllers
    using simple password.

    I ran RSOP for both group policy objects on that domain controller. For
    default domain group policy, it showed the policy "Password must meet
    complexity requirements" was not defined. For default domain controller group
    policy, it said something like 'The policy engine did not attempt to
    configure the setting' under Precedence tab.

    Any ideas?

    I figured it out!!!!

    It's the local security policy that keeps preventing me from using simple
    password.

    In Microsoft document
    http://technet2.microsoft.com/window....mspx?mfr=true

    What it says is wrong!!

    But I still don't know why the default domain controller group policy object
    can not be applied to my domain controller.

    I tried gpupdate /force, but it did not help

    Anyone know why?

  2. #2
    Join Date
    May 2008
    Posts
    1
    To turn password complexity off in Windows 2008 Server follow these steps:

    run gpmc.msc (Group Policy Management)

    Expand your Domain

    Go to <Group Policy Objects> and select <Default Domain Policy>

    Expand:
    <Computer Configurations> <Policies> <Windows Settings> <Security Settings> <Account Policies> <Password Policy>

    Disable Password Complexity.

    This is the only way to disable Password Complexity in Server 2008. The local Security Policy can not be used for changing Password Complexity in Server 2008.

  3. #3
    Join Date
    Feb 2010
    Posts
    1

    Re: Still can not disable password complexity requirements

    HI thanks for the solution its really helps thanks..

    To turn password complexity off in Windows 2008 Server follow these steps:
    run gpmc.msc (Group Policy Management)
    Expand your Domain
    Go to <Group Policy Objects> and select <Default Domain Policy>

    Expand:
    <Computer Configurations> <Policies> <Windows Settings> <Security Settings> <Account Policies> <Password Policy>

    Disable Password Complexity.

    This is the only way to disable Password Complexity in Server 2008. The local Security Policy can not be used for changing Password Complexity in Server 2008.
    Last edited by shanks198601; 10-02-2010 at 10:31 AM.

  4. #4
    Join Date
    Apr 2010
    Posts
    1

    Re: Still can not disable password complexity requirements

    i have got a problem, when i select <Default Domain Policy>, it says "the network location cannot be reached. for information about network troubleshooting, see windows help."

    how can i solve this issue?

  5. #5
    Join Date
    Oct 2011
    Posts
    1

    Re: Still can not disable password complexity requirements

    Windows Server 2008 R2 Alternate procedure:
    Start, Administrative Tools, Local Security Policy, Account Policies, Password Policy, Password must meet complexity requirements - Disabled.
    You can also change the password expiry period here.

  6. #6
    Join Date
    Jan 2012
    Posts
    1

    Re: Still can not disable password complexity requirements

    so i have done the above steps, but i still can not put in a simple password. I've changed all the password policies to "not defined" and even rebooted the server. I just want to set a simple password for a domain user.

    let it be known this is my first attempt at AD so suggest the newbi mistakes please!
    Last edited by godfather55v; 12-01-2012 at 02:13 AM.

  7. #7
    Join Date
    Jan 2012
    Posts
    3

    Re: Still can not disable password complexity requirements

    Quote Originally Posted by cocare111 View Post
    To turn password complexity off in Windows 2008 Server follow these steps:
    run gpmc.msc (Group Policy Management)
    Expand your Domain
    Go to <Group Policy Objects> and select <Default Domain Policy>
    Expand:
    <Computer Configurations> <Policies> <Windows Settings> <Security Settings> <Account Policies> <Password Policy>
    Disable Password Complexity.
    This is the only way to disable Password Complexity in Server 2008. The local Security Policy can not be used for changing Password Complexity in Server 2008.

    I tried this in Windows Server 2008 R2 that is Domain Controller too, but with no luck. I have disabled complexity, reduced the password length to 1 character and password never expires, but still nothing. I have attached a picture with the changes.

    I have a forest with 3 DC's. The root server is the first DC and I have two more DC's under the first. I want all of them to have password policies and complexity disabled (this is a test env). Is there anything else I should do? I run gpudate and even restarted the server but I still can't change the password to an old one.

  8. #8
    Join Date
    Jan 2012
    Posts
    3

    Re: Still can not disable password complexity requirements

    I would like to say that what I want to change is the administrator password and not policies for user passwords.

    What happened to me is that I completed the deployment and after a few weeks while trying to log on to the DC, a message appeared and was saying that the password expired and I had to enter a new one (for DC admin), so I did. What i want now is to try to change the passwd again, setting the first one again but complexity issues get in the way.
    Last edited by argi6argi; 13-01-2012 at 03:14 PM.

  9. #9
    Join Date
    Dec 2007
    Posts
    2,297

    Re: Still can not disable password complexity requirements

    argi6argi,

    There is no "easy" way to do this. You either take the built in method or you can build your own Group Policy extension that is described here - http://msdn.microsoft.com/library/de...-us/gp/504.asp. There might be some third party applications that already do this but I have not used any.

  10. #10
    Join Date
    Mar 2012
    Posts
    1

    Re: Still can not disable password complexity requirements

    argi6argi,
    I had the same issue as you. And I could not get the password changed back using the explanation goven here - Until I noted, that there also is a rule saying how SHORT time a password is allowed to be used (same place as the other rules). After changing that to 0 days everything worked as it should...

  11. #11
    l2arn2success Guest

    Re: Still can not disable password complexity requirements

    hi Guys,
    i have tried that as well but still not working for me...
    please advise.

    thanks,

  12. #12
    Join Date
    Aug 2011
    Posts
    410

    Re: Still can not disable password complexity requirements

    I will advice you to have a look in Default Domain Policy one more time. In this only you can find the settings to modify password complexity requirement. The default domain policy and local group policy both are different. Once you had done with the modification then run gpupdate. In Group Policy Management Console right click on the domain and choose Edit > Default Domain Policy. Now search for Computer Configuration > Windows Settings > Account policies and configure the password complexity.

  13. #13
    l2arn2success Guest

    Re: Still can not disable password complexity requirements

    Sorry my mistake, yes i found that... Excellent stuff.

    Thansk

Similar Threads

  1. Replies: 1
    Last Post: 20-01-2012, 12:36 PM
  2. Windows Server 2008 Password Complexity Requirements
    By I_A_H in forum Windows Server Help
    Replies: 2
    Last Post: 16-07-2009, 04:52 PM
  3. Replies: 4
    Last Post: 11-01-2009, 12:55 PM
  4. Disable - Password must meet complexity requirement.
    By Russyan in forum Active Directory
    Replies: 4
    Last Post: 05-06-2008, 08:20 PM
  5. Disable password complexity rules
    By Matt in forum Windows Server Help
    Replies: 1
    Last Post: 13-04-2008, 09:54 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •