Windows Server 2008 R2 Thread, Windows 2008 Group Policy in Technical; Im having a spot of trouble with windows 2008 group policy. We have two servers in our domain a windows ...
7th February 2011, 10:52 AM #1
- Rep Power
Windows 2008 Group Policy
Im having a spot of trouble with windows 2008 group policy. We have two servers in our domain a windows 2003 server and a 2008 server. The old 2003 server is being phased out and the only thing still running on it is sims. The problem i have is that when I setup the headteachers new computer and told her to set a password it tells me that every single password is not complex enough. Even if it is !!! also ive disabled the complexity rule in both the default domain policy (on both servers) and even created my own GP for the head teacher. In the end i had to manually set her password from users and computers and that worked perfectly.
Can anyone help with this frustrating issue
7th February 2011, 02:26 PM #2
Did you actually disable the complexity requirements or set it as 'not configured'? Just wondering if the Local Policy could be enforcing any requirements if you didn't 'disable' it at a higher level.
Also, I'm assuming you tried multiple passwords yourself of varying complexities? Could be worth trying to change the password directly on the machine again to see if it now works, could just be one of those weird things that computers do every now and again
Is the Server 2003 set as a DC or just a Domain Member also?
7th February 2011, 06:04 PM #3
- Rep Power
the 2003 is set as a DC aswell ive just transfered the roles across (waiting on capita now). Ive disabled the role everywhere. With vista does the local policy also play a role ? because with xp and 2003 the roles just came from the server
7th February 2011, 08:01 PM #4
They certainly do with Windows 7 so id assume its the same with Vista. I always remember the order of inheritence as LSDOu (Local, Site, Domain, Ou).
That's why I asked if you'd disabled or set as not configured. Though you can only have 1 lot of password requirements (without going into 2008s PSOs)it could be worth checking out.
If it were me though I'd leave everything as it is if it works fine elsewhere and join a workgroup with the comp, delete the AD object for the comp before rejoining it to the domain.
By Iain.Faulkner in forum Windows 7
Last Post: 24th September 2010, 11:45 AM
By goldencalve in forum Windows Server 2000/2003
Last Post: 29th January 2010, 10:39 AM
By lafleur1977 in forum Windows Server 2008
Last Post: 20th October 2009, 04:03 PM
By SYSMAN_MK in forum Windows 7
Last Post: 4th September 2009, 01:48 AM
By irsprint84 in forum Windows Server 2008
Last Post: 17th April 2009, 08:32 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)