MinimumPasswordAge and Password must meet complexity requirements issue

Hi Experts,
Our Setup
Windows Server 2003 Enterprise domain
Windows XP SP3 client boxes
Password policy setup
MinimumPasswordAge - 35
MinimumPasswordLength - 8
Password must meet complexity requirements - Enabled
EnforcePasswordHistory - 8
These were not enabled since beginning. We enabled the settings few days back. Now few of the users can't change the password. They get the following error "Password must meet the complexity requirements". One of the user has his username as the password
and now he is trying to change 'Mymother1954!' and it doesn't work.
'P@ssw0rd!' doesn't work as well.
Tried changed the MinimumPasswordAge to 0. No help. I am unsure the older (prior to the current policy setup) would be remembered. Even if it does why wouldn't it allow the user to change a unique password?
I need your experts suggestion to resolve the issue. Thanks for your help in advance.
Regards,
MPC

gpresult /v shows that the policy is getting applied successfully. So GPO isn't an issue here I guess.
Here is the output
        Account Policies
            GPO: Default Domain Policy
                Policy:            MinimumPasswordAge
                Computer Setting:  35
            GPO: Default Domain Policy
                Policy:            PasswordHistorySize
                Computer Setting:  8
            GPO: Default Domain Policy
                Policy:            MinimumPasswordLength
                Computer Setting:  8
            GPO: Default Domain Policy
                Policy:            LockoutBadCount
                Computer Setting:  N/A
            GPO: Default Domain Policy
                Policy:            MaximumPasswordAge
                Computer Setting:  45
Regards,
MPC

Similar Messages

  • Password must meet complexity requirements disabled

    I've seen this post, when end users try to change there p/w they continue to get not meeting complexity error, I dont think its because must meet complexity is enabled, I think its because the minimum password age is set to 30. so this means the end user
    has to wait till 30 days to do a password change?
    current settings
    enforce password history 2 passwords remembered
    maximum password age 365 days
    minimum password age 30 days
    minimum password length 7 characters
    password must meet complexity requirements enabled
    store passwords using reversible encryption disabled
    password must meet complexity requirements enabled
    store passwords using reversible encryption disabled
    I read that the "minimum password age 30 days " the number 30 means end users can not change there
    password till 30 days? so this seems to be the issue and the the complexity enabled is not the issue for example
    when a user wants to change there password although they are following the requirements they
    still get the not meeting the complexity message. This example should be a good password to use B05ketb011!

    Hi Neil,
    You are completely correct, that setting determines the period of time (in Days) that a password must be used before the user can change it. So since you have it set to 30, your users have to wait 30 Days until they can change their password again (after
    they first have changed it).
    A common value on that setting is 1 day, but of course that depends on your password policy.
    (Default if you set up a new domain in 2012R2 is 1 day)
    Microsoft Certified Trainer
    MCSE: Desktop, Server, Private Cloud, Messaging
    Blog: http://365lab.net

  • VPN Client Accounts: "Username and passwords must consist of numbers or letters"

    I am configuring a username in the VPN Client Accounts withing a Cisco WRVS4400N.
    The username I must enter is in the form: [email protected]
    Unfortunately, when I input that username, the system informs me that I cannot have anything other than numbers an letters.
    The instructions from my University require us to use that FULL email format.
    http://net-services.ufl.edu/provided_services/vpn/anyconnect/legacy-install.html
    Is there a way to fix this?

    Any solution for this?  How can I pass in a blank domain parameter so I am automatically logged in instead of receiving the log-in dialog asking for the domain? 

  • The Apple Store requires an apple Id and password. Apple also required the use of the Apple Store to upgrade Apple Applications.  How to I get multiple Apple ID's etc. for the many Computers I manage/administer?  I don't wish to use my personal ID or PW.

    Acquiring multiple Apple ID's

    For Mac Apps
    Apple Software Volume Licensing
    The fast, easy way to digitally download, install, and deploy Apple software to every Mac in your business or educational institution.
    http://www.apple.com/mac/volume-licensing/
    For iOS apps
    App Store Volume Purchasing for Business
    Unleash the power of the App Store to your entire workforce.
    http://www.apple.com/business/vpp/

  • I am unable to download Mavericks from the app store and seem to meet the requirements on my 10,6,8 imac 2010 with 12gb ram

    I attempted to download mavericks yesterday in the hopes of using the new lightroom 5 cc.
    The download stalled and after an attempt to try anew, I click the download button and nothing happens.
    What can I do?

    I have restarted the app store, the download button is gray in my "purchased" area and when clicked does nothing, I cancelled yesterday's attempt and started the process again...now there is no response. 
    I have downloaded a small app to see if the process works...and it does
    I have x 'd out of the download which has yesterday's date...
    I have clicked the install app button and it asks for my log in approval
    In the purchase area the button is grayed out...I logged into my account and saw that I could "unhide"  it. 
    I clicked it again and nothing happens....
    How can I start over?

  • Leopard Safari requires reloading user name and password

    Tried asking this another way and no one answered, which left me to wonder if no one on this forum knows the answer or it I wasn't clear in asking it? Let me be more specific: Leopard Safari requires a user name and password to be entered each time an appropriate web site is opened, even when "refresh" is clicked. For example, I use "myyahoo" for the homepage, but now each time I open Safari, I am required to reenter the user name and password. Ditto every site I have saved autofill data for. This did not happen with Tiger, prior to upgrading to Leopard last Friday. I also tried phoning the Apple Care support number -- a 37 minute wait produced someone who said my call needed to be forwarded to the Safari desk, and likely involve another extensive wait. So I gave up that idea and am trying here again. Help!

    Thank you! In Preferences, all the autofill boxes are checked. Just to be sure, I unchecked them all then rechecked them. Autofill form works in Edit. Before the upgrade, Safari was able to maintain user names and passwords on sites where I wanted them. After the upgrade Friday evening, Safari stopped doing this on all sites where I already had a user name and password, including the Mac site. Simply, I am now required to re-enter this information every visit to every site, even if I just click refresh, not only when I exit Safari and return. Even if I leave a site where I have entered the password, visit another site, and then return, the user name and password must be entered again. I have still had no luck getting Apple Care on the phone. This morning I bit the bullet and decided to wait until finally somebody answered, but no amount of patience can listen to scratchy wait music for more than 45 minutes, which is when I gave up. So if someone here doesn't understand this, guess I'm stuck having to enter this information again and again and again... or figure out how to get back to Tiger.

  • Security issue: parameters username and password in the jbo:ApplicationModule

    Hello,
    in the <jbo:ApplicationModule> tag, you can give parameters for username and password, Then the .jsp connects to the DB via the username/password. Alternativly, You can provide this within the <Module>.properties file.
    Now the question: Isn't this a security hole? I mean, is it under all circumstances impossible, that the source-code can be delivered by the web-server or that the byte-code from the servlet (compiled from .jsp) can be "restringed"?
    Are there other ways to protect the credentials for accessing the ORACLE DB?
    Michael

    Hi John
    thank You very much. You wrote
    BC4J provides a number of mechanisms for specifying the DB username and password that do not require
    the password to be stored in a JSP page. By default, in 9.0.2, the DB password is stored in
    a BC4J configuration (persisted in a bc4j.xcfg file), which should be secured at the customer site. I've forgotten to mention our environment is SuSE7.2, DB 8.1.7.3, iAS 1.0.2.2, Portal 3.0.9.8.
    For simplicity we would like to use the first method via bc4j.xcfg, But our bc4j.xcfg looks as follows
    <quote>
    <BC4JConfig>
    <AppModuleConfigBag>
    <AppModuleConfig name="OPKv1ModuleLocal">
    <ApplicationName>de.condor.OPKv1.OPKv1Module</ApplicationName>
    <DeployPlatform>LOCAL</DeployPlatform>
    <JDBCName>WEBAPP_NETx</JDBCName>
    <jbo.project>de.condor.OPKv1.opkv1PRJ</jbo.project>
    </AppModuleConfig>
    </AppModuleConfigBag>
    </BC4JConfig>
    </quote>
    So the question is, where to leave schema/password?JDeveloper should have also generated a connection description in the same file named WEBAPP_NET. This
    named connection should contain the relevant elements. It is not recommended that you edit this file directly. The
    configuration editor and/or the connection editor should be used instead.
    Hope this helps.
    JR

  • Run Crystal Report from URL includes username and password

    Hello,
    I've downloaded CR 2008, and CR Server 2008 demo's.
    I'm trying to use a feature I've used with CR10 enterprise, and XI report server, where I can run a report direct from the URL.
    Something like:
    HTTP://scada-ho/crystal/enterprise/admin/en/viewrpt.cwr?id=381&init=actx&apsuser=administrator&apspassword=&apsauthtype=secenterprise
    or
    http://192.168.72.98/businessobjects/enterprise115/infoview/main.aspx?id=1024&init=actx&apssystem=hobprim&apsuser=visy&apspassword=Fillers3&apsauthtype=secenterprise
    I've noticed that there were subtle syntax differences between CR10 Enterprise and XI report server in the past, and expect that similar differences exist with CR server 2008.
    Could someone show me the syntax for CR Server 2008 to run a report from a URL, and pass the required username and password, without having to go through the infoview logon screen

    Tim,
    Thanks for the reply.  I admit I did see that thread when I was looking for a solution.
    My hesitance is that for a non programmer it looks very difficult, and a lot of settings.
    I liked the URL reporting because of its simplicity - one line.
    I know that it advertises the username and password, but for our requirement (intranet reporting, LAN separated from IT), its not a big risk.
    My further investigations indicate that for CRS 2008 something like the following should work:
    http://192.168.207.156/CrystalReports/view.aspx?id=1102&apsuser=administrator&apspassword=admin1&apsauthtype=secEnterprise&init=java
    However I get
    404 - File or Directory not found.
    I'm running on Windows7 with IIS7, so I think it must be an IIS configuration issue
    Any Ideas?

  • TMS 14.4 and F5 BIG-IP config: username and password

    Hi,
    We've got 2 TMS servers running 14.3.2 software behind BIG-IP load balancer. We're going to upgrade to 14.4 but Cisco has changed the redundancy model from active/active to active/passive. Some changes are required on the load balancer and this is clear so far.
    However, Cisco mentioned username and password in the example BIG-IP config and I was told that no username is currently configured on the load balancer. The install guide says:
    "After initial configuration of your F5 BIG-IP load balancer, you can configure it with the settings below using copy and paste. All IP addresses, DNS names, usernames, and passwords must be amended to reflect your actual configuration prior to applying the settings to your load balancer"
    And:
    "HEAD /tms/public/IsAlive.aspx/?guid=<CHANGE TO THE GUID OF YOUR CISCO TMS>\\r\\n" time-until-up 0 timeout 16 username 'domain\\username'}
    Do we need to add a Windows Server admin account details?
    This may be silly question but I don't know load balancers.

    That example is pretty vague for sure, as it doesn't mention anything of that in the earlier steps in the redundancy instructions.  I believe the username and password is for an account that the load balancer would use to probe the TMS keep alive address.  If that is the case, depends on how you'd like to manage the account, two separate local accounts on both servers, or one central shared account through Active Directory.  I haven't upgraded our TMS servers yet, so I can't verify if an account is needed to check the keep alive address or not, we also don't have F5 load balancers either, so I'm kind of guessing, and like you trying to make sense of a not so very good example.
    Maybe Kjetil or one of the TMS guys can chime in and shed some light on that example for you.

  • Which are the accepted characters used in username and password?

    Hello,
    I would like to build a program using regex in order to accept the desirable characters username and password must have.
    In my pogram i have the followings:
    Username: 4 - 7 characters, I accept only letters,digits and _
    Password: 6 - 8 characters, everything that is on keyboard such as @,#,$ , > , ) ? , ' , "
    What shall i do?Are the previous right?
    May you please tell me your opinion as far as accepted characters in username and password are concerned?
    Thanks,in advance!

    sabre150 wrote:
    jverd wrote:
    sabre150 wrote:
    and why put an upper limit on the number of characters in the password and why exclude certain characters in the password.
    Every restriction you place on a password reduces the available entropy and therefore makes it easier to crack.However, certain resrictions--such as requiring at least one non-letter, not allowing dictionary words, not allowing it to contain the username, etc., while slightly reducing the average time for a brute force attack, can make other very quick attacks--like a dictionary attack--untenable. So there are some restrictions that are a good idea.I will concede this but it I am not keen on protecting a user from his own stupidity. Since this namby-pamby approach is the industry norm I have to go along with it but I hate it.In some cases you may be protecting your own assets from the user's stupidity, depending on what his account gives him access to.

  • Invalid username and password; logon denied

    Hi
    I have a CentOS VM(Linux) with Oracle database 11.2 already installed by someone. I want to use this database to install FMW component.
    I am unable to login to database with sys user. Below is the procedure I am trying to login to DB.
    *$ sqlplus /nolog*
    SQL Plus Release: 11.2.0.1...
    SQL>conn sys/password@orcl as sysdba;
    ERROR:
    ORA-01017: Invalid username and password; logon denied
    then i issued the below commands ans realised that DB is not started.
    SQL> SELECT FROM DUAL*
    SP2:0640 NOT CONNECTED.
    SQL> Startup;
    ORA-03135: Connection lost contact.
    But I am able to login to DB as sys with out providing instance name(orcl in this case)
    *$ sqlplus /nolog*
    SQL Plus Release: 11.2.0.1...
    SQL>conn sys/password as sysdba;
    Can someone let me know how to set password for sys user for orcl instance.
    TiA

    try to connect as
    $export ORACLE_SID=orcl
    $sqlplus / as sysdba
    Even then if you are not able to login.
    show the tnsping output and listener status .
    also check the sqlnet.authentication parameter in sqlnet.ora file.
    Post the above mention details ..
    --neeraj                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               

  • If i am using skype on my lap top should i download skype on the ipad, can i use same id and password??

    f i am using skype on my lap top should i download skype on the ipad, can i use same id and password??

    Of course you must download Skyoe to any device you want to use it on. And the Skype name and password must be the same on each in order to access your account, contacts, etc.

  • I can not get it to take my email and password to activate. Tried new password and won't accept

    Hp envy 5531 printer

    Hi 61notoldenough,
    I see that you are having some issues registering an Email and password, where is this an issue? I see that you have the ENVY 5531, are you trying to use an App, register at HPConnected / HPePrintCenter, etc?
    Hope to hear back.
    JERENDS
    I work on behalf of HP
    Please click “Accept as Solution” if you feel my post solved your issue, it will help others find the solution.
    Click the “Kudos Thumbs Up" to the left of the reply button to say “Thanks” for helping!

  • HT5312 Old apple ID on the Apps Store won't go away !, I have a new ID and password, old ID requests password that is forgotten together with the info to retrieve it! Help?

    I was not familiar with the system and the first ID and password with the information required to retrieve forgotten ! Old ID pops up when trying to do Updates for Certain programs and it will not go away I do not remember how to access that particular ID and can't. Get rid of it or perform updates for Cretan things...! Help anyone?

    iTunes and Mac App Store content is forever tied to the Apple ID that bought it. Apple does not transfer content from one ID to another and Apple does not merge Apple IDs. The only way that you can redownload content, update content and authorize the content's use on Macs, PCs and iOS devices is with the Apple ID used to buy it.
    You can throw away free content and buy it again with your new Apple ID if the content is still available. But to keep using free content no longer available in the iTunes and Mac App Stores, as well as, the paid content, you will need to rehabilitate the Apple ID that was used to buy it.
    Use one of these methods to contact the Account Security Team for help resurrecting the old Apple ID.
    Apple ID Security -
    Telephone Apple Care for your country and ask for the Account Security Team, then request help.
    Or use this link for contact by internet-
    http://www.apple.com/support/appleid/contact/
    Choose Other Apple ID Topics and then Apple ID Account Security

  • Send UNIX Command / No tty / username & password must be provided

    I'm utilizing Apple Remote Desktop (ARD) 3.6.1 (471.16) and I'm attempting to deploy this UNIX command:
    sudo dseditgroup -o edit -n /Local/Default -a staff -t group _lpadmin
    When using with sudo it gives me this response error:
    sudo: no tty present and no askpass program specified
    I attempted again and selected the admin user in Run Command As, and it still did not deploy the command.
    Then I attempted the command but without sudo:
    dseditgroup -o edit -n /Local/Default -a staff -t group _lpadmin
    and received this error prompt:
    'Username and password must be provided.'
    Yes we can logout all standard/managed users deskside log into admin and set it up that way, however with hundreds of macs we'd like to deploy this to is not ideal.
    Any suggestions or ways to resolve?
    Thanks!

    WOW, thats funny. I know I attempted using root as Send Command As user when deploying it, but perhaps I left sudo in the command.
    Its working sans sudo and with root as the Send Command as user.
    Thanks Varjak.

Maybe you are looking for