newly created users can't change their password

[reggiep]

Strange this one.

We have a complexity level for all users passwords set in our whole domain GPO. However newly created users cannot change their password no matter how complex they make it.

So we took the complexity out of the GPO and still the newly created users get the following error...

 

"Unable to update the password. The value provided for the new password does not meet the length, complexity or history requirements of the new domain"

 

Can anyone suggest where this might be "sticking" in our gpos or users?

 

Thanks

[Steve21]

Time before password change option?

 

Edit -

 

Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy

 

Should be a Minimum Password Age (aka days before changes)

 

Steve

Edited September 12, 2012 by Steve21

[reggiep]

Just a quick update. If we tick the box "User must change password at next logon" in users properties they can change their password no problem!

[reggiep]

Nope! Everything is set to off, if you get my drift. No minimum, no max, no complexity, no remembered!

[Michael]

It should be noted that in 2003 Server, you could only set password options at the Default Domain Policy, whereas in 2008/2008 R2 you can set password policies at OU level. Although there may be no settings at OU level, it could be inheriting the setting higher up the chain.