I've just installed a test W2K8 server. It's an Enterprise server because I couldn't persuade it to install something more reasonable, like Standard! Anyway, that's not a problem. The issue is that it automatically configures with heavy security, and I can't see where to lighten it up. E.G. Reduce the password complexity requirement. I can't change the Local Security policy, presumably because there is a Domain policy (It's the domain controller, but there are no other computers joined, yet) But |I can't see where to configure the Domain security policy. How do I 'get at' the security policy?David Gordon-Brown

Open Server Manager, right-click Features and add feature called Group Policy Management, if it's not installed. You will see the then.MCITP: Enterprise Administrator; MCT; Microsoft Security Trusted Advisor