Cannot change any passwords in Windows 7
We have a Windows 7 Laptop, that was connected to our Domain (Win 2003). The Domain had a password complexity GPO enabled. The users password expired and was prompted to change his password. No matter what password we try, we always get the error, saying the new password does not meet the password complexity policy. Policy Below. We have tried setting the minimum password age to 0, no luck. I have removed the laptop from the domain, same issue. Checked Local Security policy on the laptop, all the below policies are disabled. I have reset the LocalSecurity policy using secedit. I have change the name of the PC and readded to the domain. No Luck. I have tried to enable the local admin account but also cannot set password. I can't even create a new local user, same issue. Policy Setting Enforce password history 24 passwords remembered Maximum password age 60 days Minimum password age 1 days Minimum password length 8 characters Password must meet complexity requirements Enabled Store passwords using reversible encryption Disabled
September 15th, 2010 7:51pm

In the domain only the Default Domain Policy determines the password policy. Usually after unjoining the domain you should be able to run gpedit.msc and change that policy to what you need - if you leave the settings unconfigured, they may eventually not change from the last policy coming from the domain. Complexity requires not only a certain length of passwords, but also parts of the user name as password component are not allowed. You also could try to add a cmd prompt As Administrator and enter the command net user username Password123 (which would set the password to Password123). (Be aware, that this method of password change may affect encrpyted files in a bad way.) Best greetings from Germany Olaf
Free Windows Admin Tool Kit Click here and download it now
September 16th, 2010 3:06am

We have tried setting the local policy as per above with no change. The passwords we have tried differently meet the complexity requirements. I have also added it back to the Domain, so it should have picked up the Default Domain Policy, which it has. If I run GPResult, it shows that the policy has been applied successfully. But still cannot change the Password. The laptop has HP Protect tools enabled with all security options enabled encluding encryption. I will remove this first as it seems to be very unreliable, especially when it is instaledl along side Symantec Endpoint Security. If this fails I will try to change via the command prompt as you suggested. All else fails I suppose it is rebuild time.
September 16th, 2010 4:44pm

The command net user username Password123 didn't work either same error. Can't even turn off encryption in HP Protect tools as it ask to create a windows password, even that says the password doesn't the requirements. Rebuild time
Free Windows Admin Tool Kit Click here and download it now
September 17th, 2010 12:56am

What happens, if you join the domain and shortly alter the password policy to a minimum in the Default Domain policy for a short time? Then run gpupdate /force on the client and try again. Are you sure you are trying unique passwords and not such, which have been used before for this user? The tried passwords have nothing to do with the user name? What happens, if you create a new user account? Will assigning a "complex" password fail here as well? Best greetings from Germany Olaf
September 17th, 2010 2:30am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics