SBS2003 Password problem

[jag001]

Hi All,

I have been trying to lower the security of the passwords for small business server down from requiring a symbol to only numbers and letters and from 8 characters to 6 characters. I changed the policy in the Domain controller section as well I changed the password policy in the system management section. I did a gpupdate /force and it did not take, then i did a reboot and still when i try to reset a password it does not work. Does anyone have an idea as to what I am doing wrong.

Thanks for all your help.

 

[58sniper]

What policies does gpresult say are being applied. IIRC, that policy should be configured in the default domain policy.

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)

 

[jag001]

This is what GPResult says

Applied Group Policy Objects
-----------------------------
N/A

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Internet Connection Firewall
Filtering: Denied (Security)

Small Business Server Remote Assistance Policy
Filtering: Denied (Security)

Small Business Server Auditing Policy
Filtering: Denied (Security)

Small Business Server Windows Firewall
Filtering: Denied (Security)

Small Business Server Lockout Policy
Filtering: Denied (Security)

Default Domain Controllers Policy
Filtering: Denied (Security)

Small Business Server Client Computer
Filtering: Denied (Security)

Local Group Policy
Filtering: Not Applied (Empty)

Default Domain Policy
Filtering: Denied (Security)


USER SETTINGS
--------------

Applied Group Policy Objects
-----------------------------
N/A

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Internet Connection Firewall
Filtering: Denied (Security)

Small Business Server Remote Assistance Policy
Filtering: Disabled (GPO)

Small Business Server Windows Firewall
Filtering: Denied (Security)

Small Business Server Lockout Policy
Filtering: Disabled (GPO)

Small Business Server Client Computer
Filtering: Denied (Security)

Local Group Policy
Filtering: Not Applied (Empty)

Default Domain Policy
Filtering: Disabled (GPO)

I have tried to disable everything because for some reason everything was applied to the administrator and that account could not do anything like open up a control panel.

 

[58sniper]

You have other issues here. The admin account isn't in the same OU as other GPOs, by default, with the exception of the default domain policy (IIRC).

If I recall, the settings you need to change are in the default domain policy, which should apply to everyone. If you've gone through and mucked with those, you're going to need to undo that, and let the policies apply.

If you have policies that apply user only settings, disable the computer settings part of the policy. And vice-versa.

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)