4

I have a Windows Server 2012 R2 that is my domain controller. I want to disable the password complexity rule for a few users only. I have created a group (called Formation) in AD to identify these domain users. I have defined a GPO in an OU to disable the password complexity rule, and I have assigned my new group to this GPO.

I was hoping this would work, but when I go (on the same server) to manage the users in AD, I try to initialyze the password, but I still get the error message saying the password complexity rule was not followed.

I tried to run gpupdate /force but no success... What else should I look for to fix this?

The password policy is a computer config and I want to apply this to users, is this part of the problem?

Improve this question
2
  • 1
    As Greg mentioned in his answer, you'll need to use FGPP for this. - grouppolicy.biz/2011/08/…
    – joeqwerty
    Jun 23, 2016 at 17:47
  • It worked, I cleaned that legacy list a bit...
    – Philippe
    Jun 23, 2016 at 18:56

2 Answers 2

Reset to default
4

If you are using legacy password policies, those apply to the entire domain. You may want to research fine-grained password policies.

(Note: Fine-grained password policies were originally introduced in Windows Server 2008.)

Improve this answer
1

You need to override other GPO's

If you have your password policy built in the domain GPO then you will need to override that GPO. Hit the checkbox for override.

Here an is article on Group Policy and Precedence which discussing what is in the title as well as howto override another group policy that is taking precedence.

Points of Interest

  • A GPO can be enforced, disabled or both.

  • Block Inheritance in an organizational unit can be set

  • A GPO can have settings disabled, its computer settings disabled, or all settings disabled.

There is also this question and answer that explains howto override a GPO.

Improve this answer
1
  • If you vote down, please explain why...
    – Philippe
    Jun 23, 2016 at 18:43

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .