Still can not disable password complexity requirements

We have a domain and two domain controllers running Windows 2003 Server R2
Enterprise x64 Edition with SP2

I've disabled password complexity requirements in both default domain group
policy object and default domain controller group policy object. But I still
can not create users under User container on one of our domain controllers
using simple password.

I ran RSOP for both group policy objects on that domain controller. For
default domain group policy, it showed the policy "Password must meet
complexity requirements" was not defined. For default domain controller group
policy, it said something like 'The policy engine did not attempt to
configure the setting' under Precedence tab.

Any ideas?

I figured it out!!!!

It's the local security policy that keeps preventing me from using simple
password.

In Microsoft document
http://technet2.microsoft.com/window....mspx?mfr=true

What it says is wrong!!

But I still don't know why the default domain controller group policy object
can not be applied to my domain controller.

I tried gpupdate /force, but it did not help

Anyone know why?

To turn password complexity off in Windows 2008 Server follow these steps:

run gpmc.msc (Group Policy Management)

Expand your Domain

Go to <Group Policy Objects> and select <Default Domain Policy>

Expand:
<Computer Configurations> <Policies> <Windows Settings> <Security Settings> <Account Policies> <Password Policy>

Disable Password Complexity.

This is the only way to disable Password Complexity in Server 2008. The local Security Policy can not be used for changing Password Complexity in Server 2008.

HI thanks for the solution its really helps thanks..

To turn password complexity off in Windows 2008 Server follow these steps:
run gpmc.msc (Group Policy Management)
Expand your Domain
Go to <Group Policy Objects> and select <Default Domain Policy>

Expand:
<Computer Configurations> <Policies> <Windows Settings> <Security Settings> <Account Policies> <Password Policy>

Disable Password Complexity.

This is the only way to disable Password Complexity in Server 2008. The local Security Policy can not be used for changing Password Complexity in Server 2008.

i have got a problem, when i select <Default Domain Policy>, it says "the network location cannot be reached. for information about network troubleshooting, see windows help."

how can i solve this issue?

Windows Server 2008 R2 Alternate procedure:
Start, Administrative Tools, Local Security Policy, Account Policies, Password Policy, Password must meet complexity requirements - Disabled.
You can also change the password expiry period here.

so i have done the above steps, but i still can not put in a simple password. I've changed all the password policies to "not defined" and even rebooted the server. I just want to set a simple password for a domain user.

let it be known this is my first attempt at AD so suggest the newbi mistakes please!

Quote:

---

Originally Posted by cocare111

To turn password complexity off in Windows 2008 Server follow these steps:
run gpmc.msc (Group Policy Management)
Expand your Domain
Go to <Group Policy Objects> and select <Default Domain Policy>
Expand:
<Computer Configurations> <Policies> <Windows Settings> <Security Settings> <Account Policies> <Password Policy>
Disable Password Complexity.
This is the only way to disable Password Complexity in Server 2008. The local Security Policy can not be used for changing Password Complexity in Server 2008.

---

I tried this in Windows Server 2008 R2 that is Domain Controller too, but with no luck. I have disabled complexity, reduced the password length to 1 character and password never expires, but still nothing. I have attached a picture with the changes.

I have a forest with 3 DC's. The root server is the first DC and I have two more DC's under the first. I want all of them to have password policies and complexity disabled (this is a test env). Is there anything else I should do? I run gpudate and even restarted the server but I still can't change the password to an old one.

I would like to say that what I want to change is the administrator password and not policies for user passwords.

What happened to me is that I completed the deployment and after a few weeks while trying to log on to the DC, a message appeared and was saying that the password expired and I had to enter a new one (for DC admin), so I did. What i want now is to try to change the passwd again, setting the first one again but complexity issues get in the way.

argi6argi,

There is no "easy" way to do this. You either take the built in method or you can build your own Group Policy extension that is described here - http://msdn.microsoft.com/library/de...-us/gp/504.asp. There might be some third party applications that already do this but I have not used any.

argi6argi,
I had the same issue as you. And I could not get the password changed back using the explanation goven here - Until I noted, that there also is a rule saying how SHORT time a password is allowed to be used (same place as the other rules). After changing that to 0 days everything worked as it should...

hi Guys,
i have tried that as well but still not working for me...
please advise.

thanks,

I will advice you to have a look in Default Domain Policy one more time. In this only you can find the settings to modify password complexity requirement. The default domain policy and local group policy both are different. Once you had done with the modification then run gpupdate. In Group Policy Management Console right click on the domain and choose Edit > Default Domain Policy. Now search for Computer Configuration > Windows Settings > Account policies and configure the password complexity.

Sorry my mistake, yes i found that... Excellent stuff.

Thansk