Friday, March 16, 2012

Change Password Policy in Win 2008R2


These steps don't work on a new Windows 2008 Standard Domain Controller installation. RSOP.msc simply comes up with a group policy error stating that there are no mappings between account names and security IDs.

To be clear, this is a brand new forest with a brand new single domain which I installed a clean Windows Server 2008 standard and all of the various Windows updates. Thats it.

Is there a DIFFERENT way to unlock the security settings (i.e., without using RSOP)?  In particular, the Password policy options are all greyed out.
Thank you.


UPDATE:  I found the steps:

To turn password complexity off in Windows 2008 Server or change other grayed oout security options, follow these steps:

(1) run gpmc.msc (Group Policy Management)

(2) Expand your Domain

(3) Go to <Group Policy Objects> and select <Default Domain Policy>

(4) Expand: <Computer Configurations> <Policies> <Windows Settings> <Security Settings> <Account Policies> <Password Policy>
(5) Disable Password Complexity or change any other settings as desired.
This is the only way to disable Password Complexity in Server 2008. The
local Security Policy can not be used for changing Password Complexity
in Server 2008.

No comments:

Post a Comment