Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Shaun E on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Password policy on Domain WILL NOT CHANGE!

Status
Not open for further replies.

CourtLNet36

IS-IT--Management
Mar 8, 2002
13
US
When I finished up creating my little AD integrated domain I decided to modify the password policy for the entire domain. I set it up for minimum/maximum password age, character length (min 6), etc. And, the big one...password complexity requirement. I then decided at this juncture that the complex password should not be a requirement for my normal domain users. So, I decided to change the "password complexity requirement" back to "Not Defined". However when I tried to create a new user and password, my machine gave me the "Password does not meet minimum requirements" error (yes the password was new, and was over 6 characters). When I put a complex password in, it created the user. What is going on here?! In a pissy attempt I even created a brand new policy for the domain and disabled the default domain policy. And I still received the same error when I tried to create the user.
I was able to find something on MS Knowledge Base that somewhat touched on my problem. However it said the problem was due to the domain controller's group policy blocking inheritence from the default domain policy. Which I didn't set up.
Should I just create a new OU for my normal domain users and try to set a policy for that OU that won't inherit permissions?
But, why would the default domain policy not revert back in the first place!
Thanks!
 
When you changed the policy, did you give it time to replicate?
To speed up the replication, you can force replication through sites and services, or at a command prompt run
secedit /refreshpolicy user_policy or
secedit /refreshpolicy machine_policy
you can also use the enforce command.
 
Yep, did the "secedit /refreshpolicy machine_policy /enforce" command. And still nothing.
 
set the policy to disabled. It needs to replicate a change to the local machine registry and simply not defining it will not do that...
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top