How do you disable the password complexity requirements on a Microsoft Hyper-V Server 2008 R2?


Keep in mind that when you log into the server, the only UI you have is:

alt text

And you cannot run gpedit.msc:

C:\Users\Administrator>gpedit.msc
'gpedit.msc' is not recognized as an internal or external command, 
operable program or batch file.

because there are no .msc snap-ins installed with Microsoft Hyper-V Server 2008 R2.


The problem comes when you're trying to add an account to the server, so you can manage it, but it doesn't like most passwords:

alt text

And, predictably, typing

NET HELPMSG 2245

gives you

The password does not meet the password policy requirements. Check the minimum p
assword length, password complexity and password history requirements.

i hoped it would have been a friendly user experience, and either:

  • offered to disable the password policy
  • tell me how to disable the password policy
  • tell me how to check the minimum password length, password complexity and password history requirements.

Password Complexity Requirements

The Microsoft's default password complexity for Server Core is:

  • Passwords cannot contain the user’s account name or parts of the user’s full name that exceed two consecutive characters.
  • Passwords must be at least six characters in length.
  • Passwords must contain characters from three of the following four categories:

    1.English uppercase characters (A through Z).

    2.English lowercase characters (a through z).

    3.Base 10 digits (0 through 9).

    4.Non-alphabetic characters (for example, !, $, #, %).

External links

Update: 2k views? So many people keep coming coming to it: up-vote it!

link|improve this question

72% accept rate
Suggestion: As this is about Server Core, remove references to Hyper-V. – Richard Sep 5 '09 at 18:59
Hyper-V is a product, that is based on Server Core. It it also applies to other Server Core based products: that's fine. But my question comes from, and deals specifically with, Hyper-V. (See the screenshot) – Ian Boyd Apr 4 '10 at 0:04
feedback

1 Answer

up vote 5 down vote accepted

You can export security settings with:

secedit /export /cfg X:\new.cfg

Then you edit new.cfg (it is ini format) and change line "PasswordComplexity = 1" to "PasswordComplexity = 0". Apply it on Hyper-V server with:

secedit /configure /db C:\Windows\security\new.sdb /cfg X:\new.cfg /areas SECURITYPOLICY

You can find more details in this blog post.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.