regarding password must meet the complexity requirements policy setting

  • Thread starter Thread starter mageshkumar
  • Start date Start date
M

mageshkumar

Hi,

In windows 2000 machine, i have enabled the password must
meet the complexity requirements policy setting and set
the min. password length as 5 character. I am using an
application to change the password based on this policy
settings. As per policy it is says that
it should meet the below requirements
If this policy is enabled, passwords must meet the
following minimum requirements:

-->Not contain all or part of the user's account name
-->Be at least six characters in length
-->Contain characters from three of the following four
categories:
English uppercase characters (A through Z)
English lowercase characters (a through z)
Base 10 digits (0 through 9)
Non-alphabetic characters (for example, !, $, #, %)
Complexity requirements are enforced when passwords are
changed or created.

I have given 5 character as length only. As per this
policy it should throw error instead it is changing my
password. So my question is the minimum password for this
policy setting is 6 character or what is the minimum
length?
 
Questions:
1. Were the settings defined in the 'Default Domain Policy"?
2. For the Domain Controllers OU, is there any 'Block Inheritance'
configured?

Try the following:
1. Run 'net accounts' on the DC. Check the effective settings.
2. Run 'net accounts' on the client. Check the effective settings.
3. Run 'secedit /export /mergedpolicy /cfg sec.txt'. Check the effective
settings.

For password policy, the settings on the domain controller will be the
effective one, regardless of what you see on the client's computers.
 
Back
Top