4
votes
1answer
35 views

Changing password expiration policy at next password change

We have a password policy with a maximum password age of 180 days. For various reasons we need to change it to 90 days, with a minimum impact for the users. Our users are normally warned about the ...
3
votes
2answers
193 views

Active Directory - How to find what machine applied a GPO

I've got a GPO that is configured to change the local builtin Administrator's password on certain machines. I need to find what machines have applied this GPO to themselves. I've written a script that ...
-1
votes
1answer
584 views

Setting a password hint on administrator account in Windows Server 2008 R2

I've tried to change a password on administrator account using Control Panel\All Control Panel Items\User Accounts\Change Your Password but can't set a password hint. When I clicked What is a password ...
3
votes
1answer
448 views

Disabling Password Complexity for OU and C# App creating AD accounts

I created a C# app that is creating a series of AD accounts from a database. The issue i am running into is the passwords i am gathering had no complexity requirements so when i am passing them into ...
3
votes
1answer
652 views

No password is complex enough

I have one user in my AD domain who seems to not be able to self-select a password. I may have another one, but they're on a different enough password-expiration schedule that I can't remember who it ...
0
votes
3answers
1k views

Password Policy seems to be ignored for new Domain on Windows Server 2008 R2

I have set up a new Windows Server 2008 R2 domain controller, and have attempted to configure the Default Domain Policy to permit all types of passwords. When I want to create a new user (just a ...
0
votes
2answers
309 views

User Cannot Change Password

I am having a situation where I need to restrict the user access to change their password in Active Directory (Windows Server 2008 Standard) environment. What I need is to check the Account Options ...
2
votes
1answer
2k views

How to exclude a user from an applied password policy

I have received a requirement that a single user needs to be excluded from the company's password policy (the CEO if you ask). as such, I have tried the following with no success. I have copied the ...
2
votes
1answer
2k views

Active Directory GPO for Password Policy Not Applying from Default Domain Policy

Ok. I have implemented a Password Policy. I know from previous posts that it cannot be applied from within an OU so I have configured it from the Default Domain Policy. I run RSOP.msc from a client ...
4
votes
1answer
1k views

local admin vs domain admin on a domain controller

I would like to create a group policy to set a specific password for all local administrator users. Now even though you can't manage local users on a domain controller ("This snap-in cannot be used on ...
1
vote
2answers
567 views

What are the side-effects of disabling the old Lan Manager hash?

All of the computers in our domain are running Windows XP/Server 2003 and above (with one exception, a Win2Ksp4 server, which is not a domain controller). I intend to disable the LM hashes via group ...
1
vote
2answers
47 views

Computers displaying an unwanted password change prompt

We run a small network of users from a central SBS 2008 server that handles group policy & AD. Most of our users operate under a policy that propts them for a password change every 6 months as a ...
1
vote
1answer
1k views

Disable password age policy for admin on Windows Server

By default on my SBS08, the Maximum password age is set to 1year. I'd like to disable this particular parameter for Domain Admin, not the entire policy (Default Domain Policy). Is that possible ? ...
5
votes
1answer
4k views

Users on windows 2008 R2 server cannot change own password

I have a Win2k8R2 server configured as PDC and Terminal Services (yes, i know.). My manager would like users to be able to reset their own passwords by using the Start Menu -> Windows Security -> ...
3
votes
2answers
2k views

How do i remove a password expiration policy?

We had a password expiration policy recently removed from our AD but some users continued to get the "..your password will expire in x days. would you like to change it now?" message. So we added a ...
1
vote
2answers
2k views

Blocking password policy (expiry) for a particular OU in AD

Situation is this: I need to have a particular container in my AD environment which blocks password expiry policy, but accepts all other policies. Is this something that would work by simply adding ...
3
votes
9answers
4k views

Windows domain password policy advice

I have windows domain that needs a password policy. Right now there isn't one. Anyone have feedback on a good balance between weak passwords and users having passwords so strong they just write them ...
0
votes
1answer
1k views

Accounts Password Stays Expired After Group Policy Change

Let's say I have a group policy that sets the maximum password age at 90 days. Some user doesn't change their password for 91 days, so their password should be expired. If I then remove that group ...
8
votes
4answers
8k views

Is there a group policy that would push a new user name and password to all local machines on a network?

I work on a small network that runs on windows server 2003, and with machines running xp. Is there a group policy that could push a new user name and password to replace our old local administrator ...
21
votes
6answers
83k views

Disable password complexity rule in Active Directory

Where do I go to disable the password complexity policy for the domain? I've logged onto the domain controller (Windows Server 2008) and found the option in local policies which is of course locked ...