Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have to make accounts for certain users who work on location and their passwords are 3 characters. We disable password complexity and minimum length when we make these accounts and then renable it when we are done.

Is there anyway I can make a script to only allow this change for ~10 minutes before reverting back to requiring the original length and password complexity?

share|improve this question
Boy is that ugly. – Izzy Jun 29 '11 at 21:22

What version of Windows/Active Directory are you on? If you're on 2008 native mode, you can actually now have multiple password policies within a domain. That would be much cleaner than the hack you're currently using.

share|improve this answer
Well the thing is I am not technically the network admin. I don't have that control and from what I understand he doesn't want to enforce multiple policies (don't ask me why). That is why I wanted to automate it so we could stay somewhat secure without making any changes. – safhh Jun 29 '11 at 21:24
Then he needs to find a new job. – Izzy Jun 29 '11 at 21:27
So can you answer my original question? – safhh Jun 29 '11 at 21:28
You don't want an answer to your original question. You think you do, but down that way lies heartache and pain. – Evan Anderson Jun 29 '11 at 21:32
@sahh: Ypu need to find out why your network admin is not supporting your business requirements. – Iain Jun 29 '11 at 21:49

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.