Password complexity requirements

[synaesthesia]

Odd one! New users are getting a couple of account related oddities:

 

1. Their passwords expire after 30 days

2. When they attempt to change, they get a "Your password does not meet the complexity requirements..."

 

Both settings are false - there is no password expiry at domain level, and there is no complexity requirement other than length (which is met) for the users.

Checking the GP results both locally and via the wizard says this is also true - the succesful policy is Default Domain Policy which is where the above is defined, and there are no other settings *anywhere* in GP being applied to override this.

 

Once we change the password for them (well, they do it here), it's fine.

 

Seen a few other hits for this issue on spiceworks, technet and most point to a policy overriding which I've confirmed isn't the case. 2008 R2 servers and 7x64 clients.

Anyone else had this and/or know a fix so we don't have to keep doing new users passwords for them?

[edutech4schools]

do you have 'Fine Graines Password' enabled? This is created in the ADSI Edit snap-in and then used by Group policy as a security group. apart from that I have no idea.

[synaesthesia]

Cheers, just checked and it's not enabled (and deferring to default domain policy).

Tis an odd one. Just checked a station's local policy, nothing there either.