retrive/reset password complexity setting

[shaddow]

Is there any way that i can read/set Password Complexity setting using script or at least some API?

________
George, M
Searches(faq333-4906),Carts(faq333-4911)

 

[markdmac]

This is only configured in one place, the Default Domain Policy in Active Directory.

Simply view/edit it via GPO.

I hope you find this post helpful.

Regards,

Mark

 

[shaddow]

Yes i know that, but i wanted to be able to set that from a scrip or an application used to make some automated installs on my domain. I need to create some simple users and it doesnt work well when password complexity is enabled. Sometimes creates user sometimes not. But when that is disable it works everytime.

Been looking to some security api but i'm afraid i dont know how to reach it.

________
George, M
Searches(faq333-4906),Carts(faq333-4911)

 

[markdmac]

Why don't you create your users with a "default" complex password and not mess with your policy?

You can script the creation of your users with something like "Abcd1234" and it should work every time. Just set the requirement to change password on next login.

Disabling the policy just to create users is a bad idea. You would need to wait for AD to replicate between your DCs. And during that time a user could then change their password to a non complex password and have the system approve it.

I hope you find this post helpful.

Regards,

Mark