10

How do you disable the password complexity requirements on a Microsoft Hyper-V Server 2008 R2?


Keep in mind that when you log into the server, the only UI you have is:

alt text

And you cannot run gpedit.msc:

C:\Users\Administrator>gpedit.msc
'gpedit.msc' is not recognized as an internal or external command, 
operable program or batch file.

because there are no .msc snap-ins installed with Microsoft Hyper-V Server 2008 R2.


The problem comes when you're trying to add an account to the server, so you can manage it, but it doesn't like most passwords:

alt text

And, predictably, typing

NET HELPMSG 2245

gives you

The password does not meet the password policy requirements. Check the minimum p
assword length, password complexity and password history requirements.

i hoped it would have been a friendly user experience, and either:

  • offered to disable the password policy
  • tell me how to disable the password policy
  • tell me how to check the minimum password length, password complexity and password history requirements.

Password Complexity Requirements

The Microsoft's default password complexity for Server Core is:

  • Passwords cannot contain the user’s account name or parts of the user’s full name that exceed two consecutive characters.
  • Passwords must be at least six characters in length.
  • Passwords must contain characters from three of the following four categories:

    1.English uppercase characters (A through Z).

    2.English lowercase characters (a through z).

    3.Base 10 digits (0 through 9).

    4.Non-alphabetic characters (for example, !, $, #, %).

External links

Update: 2k views? So many people keep coming coming to it: up-vote it!

2
  • Suggestion: As this is about Server Core, remove references to Hyper-V.
    – Richard
    Sep 5, 2009 at 18:59
  • Hyper-V is a product, that is based on Server Core. It it also applies to other Server Core based products: that's fine. But my question comes from, and deals specifically with, Hyper-V. (See the screenshot)
    – Ian Boyd
    Apr 4, 2010 at 0:04

2 Answers 2

16

You can export security settings with:

secedit /export /cfg X:\new.cfg

Then you edit new.cfg (it is ini format) and change line "PasswordComplexity = 1" to "PasswordComplexity = 0". Apply it on Hyper-V server with:

secedit /configure /db C:\Windows\security\new.sdb /cfg X:\new.cfg /areas SECURITYPOLICY

You can find more details in this blog post.

2
0

Open Local Security Policy by clicking the Start button Picture of the Start button, typing secpol.msc into the search box, and then clicking secpol.‌ Administrator permission required If you're prompted for an administrator password or confirmation, type the password or provide confirmation.

In the left pane, double-click Account Policies, and then click Password Policy.

Double-click the item in the Policy list that you want to change, change the setting, and then click OK.

4
  • 4
    On Microsoft Hyper-V Server 2008 R2 there is no Start button. The only UI is a console window (shown in the original question).
    – Ian Boyd
    Jun 29, 2015 at 21:20
  • Voted down as poster clearly didn't read the original question.
    – shawty
    Aug 30, 2016 at 15:16
  • @shawty happy now?
    – vaheeds
    Aug 31, 2016 at 10:15
  • read "ian boyd's" comment.
    – shawty
    Aug 31, 2016 at 17:57

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .