Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have deployed a test environment which has a root domain controller ( and three sub-domains -, and

After a few weeks, I tried to log on to the FRDC as the Domain Administrator and I was asked to change the password, which I did.

However, I want to disable the complexity policies for the administrator password in order to set the original password and keep it permanently.

Is there any way to do this? I tried from GPMC.msc but it seems that this influences the users complexity and not the domain admin's.

share|improve this question

Firstly, yes, what you want is possible.

The phrase you're looking for is "Fine Grained Password Policy" which allows you to configure password policies based on Global Security Group membership.

Be warned, though, while it's not too *complicated*, it isn't a process that's as slick as other areas of Active Directory.

I try and avoid posting blind links, but there's probably too much to put into an answer here so here is a walkthrough:

share|improve this answer
Thank you very much for the immediate answer. I'll try what the article says and get back to you. – argi6argi Jan 13 '12 at 11:12

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.