Password change error message too generic on Windows Server 2025 domain

“In Server 2025, when the new password doesn’t meet one of the domain’s password rules (length, complexity, history, etc.), the system often shows a generic error — “Unable to change the password at this time.” Unfortunately, Windows does not always reveal exactly which rule failed. To clarify the cause, you can enable audit logging on the domain controllers and examine their security logs when the user’s change fails. That usually reveals the specific rule being violated (e.g. “too short,” “no uppercase,” “reused password”).