Hi Ken,

Are you trying to reset the password of a domain user account or a local
user account on that machine?

Account policy must be set at the domain level to affect domain accounts. If
account policy is set at the organizational unit level it will only affect
local accounts on machines the policy applies to (i.e. machines with
computer accounts in the organizational unit).

Mike

------------------------------------------------------------------
Mike Aubert
MCSE, MCSD, MCDBA
mikenews2@2000trainers.com

Note the "news2" in my email address is temporary and may be changed in the
future, remove it to email me at my Permanente address.
This posting is provided "AS IS" with no warranties, and confers no rights.


"ken" <anonymous@discussions.microsoft.com> wrote in message
news:080FFF6D-7D15-4F9D-BFD0-AC82D9BE940B@microsoft.com...
Then reboot the client and log into the network I noted that the policy has
been pushed to the client, but when I try and change the password at the
client, I get a dialog box that says "Your password must be at least 7
characters and can't be a repeat." Where is this coming from?

I’m trying to set a domain user account at the Default Domain Policy

Here is my setting:

Enforce Password History = 0 password remembere
Maximum Password Age = 120 day
Minimum Password Age = 0 day
Minimum Password Length = 3 character
Password Must Meet Complexity = Disable
Store Password Reversible Encryption = Disable

I have run gpupdate, but both a XP and W2K client the same password dialog..

Ken!

Still, By Define such settings within a Group Policy only applies to the
local accounts at the effected computers.

Use the Domain Security Policy to define such settings in your Active
Directory Domain.

--
Regards,

Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1

"Ken" <anonymous@discussions.microsoft.com> skrev i meddelandet
news:B39CB14D-DFFD-46CF-B911-9E6F72C3433B@microsoft.com...

Please...

Where might I find the "Domain Security Policy"

Thanks

This snapin can be found at one of your domain controllers.

Start-> Settings -> Control Panel -> Administrative Tools --> Domain
Security Policy

--
Regards,

Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1

"Ken" <anonymous@discussions.microsoft.com> skrev i meddelandet
news:97102DD2-C048-4DFD-81CE-F226BE85889D@microsoft.com...

OK.

So I have open the Domain Security Policy...

And I see the same Security Setting as in the Default Domain Policy. here are the setting

Enforce Password History = 0 password remembere
Maximum Password Age = 120 day
Minimum Password Age = 0 day
Minimum Password Length = 3 character
Password Must Meet Complexity = Disable
Store Password Reversible Encryption = Disable

I still can not change my password to "test" from "Zinterym98!" or to "Ttiuyt1q!w" which should meet the 7 characters and complexity rules or history... which the password dialog box is warning me about....

More INF

I also have noted that I was change Password setting on the local user but not the domain. Is there a registory setting on the domain controller? I was able to change other things like Logon Message Text window. So I know that some things are working but not the domain password settings.. I've using the gpupdate /force too...

Thanks for our continuing help....

is the particular user account a domain user or local user?

--
Regards
Christoffer Andersson

No email replies please - reply in the newsgroup

"Ken" <anonymous@discussions.microsoft.com> skrev i meddelandet
news:5EFBA260-153F-4FBF-8B85-7EFF45A0ED88@microsoft.com...
was able to change other things like Logon Message Text window. So I know
that some things are working but not the domain password settings.. I've
using the gpupdate /force too....

a domain user

Seems like the Minimum Password Age prevents you here.

--
Regards
Christoffer Andersson

No email replies please - reply in the newsgroup

"ken" <anonymous@discussions.microsoft.com> skrev i meddelandet
news:A8E8DF03-8AAB-4509-8772-B955533B97FC@microsoft.com...

I have it set to 0, which should mean immediate. Is there a problem with this setting? If so can you report this problem? Also the dialog box maybe hard coded..

0 should be fine ken, make sure the policies are in replication if you have
more than one DC. Sorry I'm seems to be lost here.

--
Regards
Christoffer Andersson

No email replies please - reply in the newsgroup

"ken" <anonymous@discussions.microsoft.com> skrev i meddelandet
news:958F5D5F-0B1B-4A9B-8477-6E80296A5987@microsoft.com...
hard coded..