Jump to content

Change password complexity


Recommended Posts

Guest Javier
Posted

Hi...

 

I need to disable the password complexity in a Windows 2008.

 

The problem is that the password complexity in my server is enable and not

give me the posibility to change.

 

Thanks a lot.

 

Javier Valverde

Guest Daniel Petri
Posted

If the server is a member of an AD domain, use GPMC (gpmc.msc) > Default

Domain Policy >

 

Windows Settings

Security Settings

Account Policies/Password Policy

 

Password must meet complexity requirements = Disabled

 

If it's a stand alone machine, do the same but from the Local Policies

(secpol.msc).

 

Refresh the policy by running:

 

gpupdate /force

 

 

 

 

--

Sincerely,

 

Daniel Petri

MVP, Senior IT consultant, trainer

www.petri.co.il

 

"Javier" <Javier@discussions.microsoft.com> wrote in message

news:9A65FB6C-2820-46BA-AF9E-B61EE84BAFC3@microsoft.com...<span style="color:blue">

> Hi...

>

> I need to disable the password complexity in a Windows 2008.

>

> The problem is that the password complexity in my server is enable and not

> give me the posibility to change.

>

> Thanks a lot.

>

> Javier Valverde </span>

Guest Anteaus
Posted

Might add that while I've not tested 2008 yet, on 2003 it seems to take a

medium-sized tactical nuke to get this policy-change to stick.

 

You may need to keep applying 'gpupdate /force' or rebooting till it

eventually takes.

 

"Daniel Petri <MVP>" wrote:

<span style="color:blue">

> If the server is a member of an AD domain, use GPMC (gpmc.msc) > Default

> Domain Policy >

>

> Windows Settings

> Security Settings

> Account Policies/Password Policy

>

> Password must meet complexity requirements = Disabled

>

> If it's a stand alone machine, do the same but from the Local Policies

> (secpol.msc).

>

> Refresh the policy by running:

>

> gpupdate /force

>

>

>

>

> --

> Sincerely,

>

> Daniel Petri

> MVP, Senior IT consultant, trainer

> www.petri.co.il

>

> "Javier" <Javier@discussions.microsoft.com> wrote in message

> news:9A65FB6C-2820-46BA-AF9E-B61EE84BAFC3@microsoft.com...<span style="color:green">

> > Hi...

> >

> > I need to disable the password complexity in a Windows 2008.

> >

> > The problem is that the password complexity in my server is enable and not

> > give me the posibility to change.

> >

> > Thanks a lot.

> >

> > Javier Valverde </span>

> </span>

Guest Daniel Petri
Posted

I personally never had any issues with changing the domain password policy

settings. If you do it the right way, if you replicate the DCs, and if you

reboot/refresh the policy I see no reason for it not to "stick"...

 

--

Sincerely,

 

Daniel Petri

MVP, Senior IT consultant, trainer

www.petri.co.il

 

"Anteaus" <Anteaus@discussions.microsoft.com> wrote in message

news:EE49E358-F821-4459-84C1-5FEDC3EC42A0@microsoft.com...<span style="color:blue">

>

> Might add that while I've not tested 2008 yet, on 2003 it seems to take a

> medium-sized tactical nuke to get this policy-change to stick.

>

> You may need to keep applying 'gpupdate /force' or rebooting till it

> eventually takes.

>

> "Daniel Petri <MVP>" wrote:

><span style="color:green">

>> If the server is a member of an AD domain, use GPMC (gpmc.msc) > Default

>> Domain Policy >

>>

>> Windows Settings

>> Security Settings

>> Account Policies/Password Policy

>>

>> Password must meet complexity requirements = Disabled

>>

>> If it's a stand alone machine, do the same but from the Local Policies

>> (secpol.msc).

>>

>> Refresh the policy by running:

>>

>> gpupdate /force

>>

>>

>>

>>

>> --

>> Sincerely,

>>

>> Daniel Petri

>> MVP, Senior IT consultant, trainer

>> www.petri.co.il

>>

>> "Javier" <Javier@discussions.microsoft.com> wrote in message

>> news:9A65FB6C-2820-46BA-AF9E-B61EE84BAFC3@microsoft.com...<span style="color:darkred">

>> > Hi...

>> >

>> > I need to disable the password complexity in a Windows 2008.

>> >

>> > The problem is that the password complexity in my server is enable and

>> > not

>> > give me the posibility to change.

>> >

>> > Thanks a lot.

>> >

>> > Javier Valverde</span>

>> </span></span>

Posted

Daniel can you tell me how to change the windows log in passwoord from my

computer I purchased form a goodwill. One person told me to install a new

operating system but I cant even get the computer to read the disk

 

"Daniel Petri <MVP>" wrote:

<span style="color:blue">

> I personally never had any issues with changing the domain password policy

> settings. If you do it the right way, if you replicate the DCs, and if you

> reboot/refresh the policy I see no reason for it not to "stick"...

>

> --

> Sincerely,

>

> Daniel Petri

> MVP, Senior IT consultant, trainer

> www.petri.co.il

>

> "Anteaus" <Anteaus@discussions.microsoft.com> wrote in message

> news:EE49E358-F821-4459-84C1-5FEDC3EC42A0@microsoft.com...<span style="color:green">

> >

> > Might add that while I've not tested 2008 yet, on 2003 it seems to take a

> > medium-sized tactical nuke to get this policy-change to stick.

> >

> > You may need to keep applying 'gpupdate /force' or rebooting till it

> > eventually takes.

> >

> > "Daniel Petri <MVP>" wrote:

> ><span style="color:darkred">

> >> If the server is a member of an AD domain, use GPMC (gpmc.msc) > Default

> >> Domain Policy >

> >>

> >> Windows Settings

> >> Security Settings

> >> Account Policies/Password Policy

> >>

> >> Password must meet complexity requirements = Disabled

> >>

> >> If it's a stand alone machine, do the same but from the Local Policies

> >> (secpol.msc).

> >>

> >> Refresh the policy by running:

> >>

> >> gpupdate /force

> >>

> >>

> >>

> >>

> >> --

> >> Sincerely,

> >>

> >> Daniel Petri

> >> MVP, Senior IT consultant, trainer

> >> www.petri.co.il

> >>

> >> "Javier" <Javier@discussions.microsoft.com> wrote in message

> >> news:9A65FB6C-2820-46BA-AF9E-B61EE84BAFC3@microsoft.com...

> >> > Hi...

> >> >

> >> > I need to disable the password complexity in a Windows 2008.

> >> >

> >> > The problem is that the password complexity in my server is enable and

> >> > not

> >> > give me the posibility to change.

> >> >

> >> > Thanks a lot.

> >> >

> >> > Javier Valverde

> >> </span></span>

>

> </span>

Guest Daniel Petri
Posted

Are you talking about the Windows Logon password? I suggest you open a new

thread and not hijack this one.

 

--

Sincerely,

 

Daniel Petri

MVP, Senior IT consultant, trainer

www.petri.co.il

 

"Dee" <Dee@discussions.microsoft.com> wrote in message

news:BE390A5A-883D-4D66-9120-04F32E500DE1@microsoft.com...<span style="color:blue">

> Daniel can you tell me how to change the windows log in passwoord from my

> computer I purchased form a goodwill. One person told me to install a new

> operating system but I cant even get the computer to read the disk

>

> "Daniel Petri <MVP>" wrote:

><span style="color:green">

>> I personally never had any issues with changing the domain password

>> policy

>> settings. If you do it the right way, if you replicate the DCs, and if

>> you

>> reboot/refresh the policy I see no reason for it not to "stick"...

>>

>> --

>> Sincerely,

>>

>> Daniel Petri

>> MVP, Senior IT consultant, trainer

>> www.petri.co.il

>>

>> "Anteaus" <Anteaus@discussions.microsoft.com> wrote in message

>> news:EE49E358-F821-4459-84C1-5FEDC3EC42A0@microsoft.com...<span style="color:darkred">

>> >

>> > Might add that while I've not tested 2008 yet, on 2003 it seems to take

>> > a

>> > medium-sized tactical nuke to get this policy-change to stick.

>> >

>> > You may need to keep applying 'gpupdate /force' or rebooting till it

>> > eventually takes.

>> >

>> > "Daniel Petri <MVP>" wrote:

>> >

>> >> If the server is a member of an AD domain, use GPMC (gpmc.msc) >

>> >> Default

>> >> Domain Policy >

>> >>

>> >> Windows Settings

>> >> Security Settings

>> >> Account Policies/Password Policy

>> >>

>> >> Password must meet complexity requirements = Disabled

>> >>

>> >> If it's a stand alone machine, do the same but from the Local Policies

>> >> (secpol.msc).

>> >>

>> >> Refresh the policy by running:

>> >>

>> >> gpupdate /force

>> >>

>> >>

>> >>

>> >>

>> >> --

>> >> Sincerely,

>> >>

>> >> Daniel Petri

>> >> MVP, Senior IT consultant, trainer

>> >> www.petri.co.il

>> >>

>> >> "Javier" <Javier@discussions.microsoft.com> wrote in message

>> >> news:9A65FB6C-2820-46BA-AF9E-B61EE84BAFC3@microsoft.com...

>> >> > Hi...

>> >> >

>> >> > I need to disable the password complexity in a Windows 2008.

>> >> >

>> >> > The problem is that the password complexity in my server is enable

>> >> > and

>> >> > not

>> >> > give me the posibility to change.

>> >> >

>> >> > Thanks a lot.

>> >> >

>> >> > Javier Valverde

>> >></span>

>>

>> </span></span>

  • 1 month later...
Guest Anteaus
Posted

Just reviving this thread, as I got round to testing Server 2008 and

immediately hit password problems, in fact I never even saw a desktop.

 

Starts with a prompt to 'Logon as other user' Hmm.. what on earth does this

mean? What is an 'other user' .. ?

 

Press anyway, and I'm asked to enter a username and password. But, how can I

do this when setup didn't allow me to establish any users or passwords?

 

So, with a bit of lateral thinking, I wonder if this box creates a new

user?

 

Quick test shows that it doesn't.

 

OK this is a server, so let's try Administrator . But this could present a

problem as have no idea what the Admin password is. I was never asked for

one, and AFAIK there is no default. Let's just assume blank.

 

This looks promising.. a prompt that tells me I must 'change' the

Adminsitrator password. Syntactically incorrect as there isn't one, but

nevertheless we're at least getting somewhere now.

 

Out with my password-generator, and whip-up a 12-character password on mixed

numbers/letters.

 

Only to be told this 'Doesn't meet complexity requirements!' and you

guessed.. NO INFORMATION AT ALL ABOUT WHAT THOSE REQUIREMENTS ARE!

 

Not being the kind who likes playing lotto, I try F1, etc, hoping to get the

lowdown on what I must do, but there is no help whatsoever on this.

 

So, I try a 'crazy' password, one which even Cmdr. Data would find

impossible to memorize. Result, this time no complexity message, in fact no

error of any kind, but no logon either. Instead it just keeps 'cycling back'

to the Ctrl-Alt-Del screen. Try seveal times. No joy.

 

It this point I decide it's time to give up. Only, next

wonderfully-thoughful piece of design, none of these screens has a shutdown

button. Looks like pulling the plug is the only way out of this. Yank.

 

Top marks for design, Microsoft. I never even got to see your wonderful new

server OS. style_emoticons/

 

Wonder what I missed?

 

If the rest is like the logon, maybe I don't care!!!!

 

----------------

 

OK so I'm an IT admin and maybe I could figure/hack a way round this, but

I've presented as a new user woudl see it, to show just how singularly

dreadful a piece of ergonomics it is.

 

 

 

"Javier" wrote:

<span style="color:blue">

> Hi...

>

> I need to disable the password complexity in a Windows 2008.

>

> The problem is that the password complexity in my server is enable and not

> give me the posibility to change.

>

> Thanks a lot.

>

> Javier Valverde</span>

Guest S. Pidgorny
Posted

G'day:

 

Anteaus wrote:<span style="color:blue">

> Just reviving this thread, as I got round to testing Server 2008 and

> immediately hit password problems, in fact I never even saw a desktop.

>

> Starts with a prompt to 'Logon as other user' Hmm.. what on earth does this

> mean? What is an 'other user' .. ?</span>

 

<span style="color:blue"><span style="color:green">

>> I need to disable the password complexity in a Windows 2008.

>>

>> The problem is that the password complexity in my server is enable and not

>> give me the posibility to change.</span></span>

 

No, your problem is that you cannot logon at all. Not sure how you ended

up in this situation but clean installation will help.

 

Should you not feel like installing anything, here's the VHDs:

 

http://www.microsoft.com/downloads/details...eb-b822ec5af0c9

 

Username: administrator, password: pass@word1 (Administrator account)

 

 

--

Svyatoslav Pidgorny, MS MVP - Security, MCSE

-= F1 is the key =-

 

http://sl.mvps.org http://msmvps.com/blogs/sp

  • 2 weeks later...
Guest battlecmdr
Posted

Hello, In regards to the original thread. I had a question. Certain

managers where I work want their password complexity removed, but they

want the other employees to still have to use it. How can I change it so

certain users do not have password complexity?

 

Thanks in advance!

 

 

--

battlecmdr

------------------------------------------------------------------------

battlecmdr's Profile: http://forums.techarena.in/members/battlecmdr.htm

View this thread: http://forums.techarena.in/microsoft-security/1000801.htm

 

http://forums.techarena.in

  • 3 months later...
Guest svovi01
Posted

I concur with problems getting domain policy password complexity changes

to "stick" (at least on a 2008 enterprise w/ads configured). I am

trying to disable the complexity.

 

I have run gpupdate /force and rebooted several times, the policy says

all complexity rules are disabled and yet I am still not allowed to set

simple password with the same old error.

 

I am spending a lot of time trying to figure out what else can I do to

get this to "stick." Any other ideas?

 

 

--

svovi01

------------------------------------------------------------------------

svovi01's Profile: http://forums.techarena.in/members/svovi01.htm

View this thread: http://forums.techarena.in/microsoft-security/1000801.htm

 

http://forums.techarena.in

Guest svovi01
Posted

found another thread that described the problem of policy changes not

"sticking" and that no password settings should be "not defined" but if

you want to disable them you have to define them and then set to 0.

 

that fixed it for me. complexity is finally turned off.

 

 

--

svovi01

------------------------------------------------------------------------

svovi01's Profile: http://forums.techarena.in/members/svovi01.htm

View this thread: http://forums.techarena.in/microsoft-security/1000801.htm

 

http://forums.techarena.in

Guest Anteaus
Posted

Met this one on several installs ranging from 2000 to 2008 server, and IME

it takes several attempts to get the change to stick, whatever you do. Reckon

there is bug in the implementation of this policy.

 

The most braindead aspect is that it tells the user "your password does not

meet complexity requirements.." but will not say what those requirements are.

Thus the user, after numerous attempts at 'password lotto' has to phone

techsupport for advice.

 

 

"svovi01" wrote:

<span style="color:blue">

>

> found another thread that described the problem of policy changes not

> "sticking" and that no password settings should be "not defined" but if

> you want to disable them you have to define them and then set to 0.

>

> that fixed it for me. complexity is finally turned off.

>

>

> --

> svovi01

> ------------------------------------------------------------------------

> svovi01's Profile: http://forums.techarena.in/members/svovi01.htm

> View this thread: http://forums.techarena.in/microsoft-security/1000801.htm

>

> http://forums.techarena.in

>

> </span>

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...