Google + AD?

[GoatSheep]

Morning,

I have created a GSuite domain and setup Google Directory Sync and password sync. I understand that the AD password needs to be reset in AD before I can log into google services.

 

If I open a browser and sign into google, on screen 1 I enter username (fine) on screen 2 enter AD changed password (fine) but then I would expect to be logged in. Instead screen 3 asks "Create a Strong Password"

If I look at the user in Gsuite it says the user has never signed in.

 

If you create a strong password then the user appears as having signed in but the google account is now using the new password not the AD password.

 

How do I stop Google from asking me to create a strong password? I am waiting for Google to get back to me.

 

Thanks

[Cazab]

I think it's in Google Admin -> Security ->Password Management

You should then see a tickbox that says 'Enforce Strong Password'. Is that ticked?

And here you can choose which OU to apply to or for the whole organisation.

[GoatSheep]

Thanks for the quick response. We were told to untick this by google yesterday. I have re-ticked it and will give it an hour to propagate.

Below are the screenshots of what we are getting. This happens on a Chrome device and a browser.

 

[RLR]

In the GCDS have you ticked the box to make new users set a password at sign in?

 

[GoatSheep]

Morning, this setting sorted it out. I think the lesson we learned was that every time we make a change to GCDS we need to save it, close the program and re open then the xml file.

Thanks.

[jthompson]

I think GCDS needs to be run under the same user account each time, due to how the XML file gets encrypted. If you're running it as a scheduled task, the task needs to be run as that user, also.