Password policy requires complexity even though disabled in Group policy

%3CLINGO-SUB%20id%3D%22lingo-sub-1004562%22%20slang%3D%22en-US%22%3EPassword%20policy%20requires%20complexity%20even%20though%20disabled%20in%20Group%20policy%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1004562%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20recently%20build%20new%20environment%20with%20Windows%202019%20STD%20and%20migrated%20all%20users%20from%20old%20domain.%20I%20wanted%20to%20exclude%20password%20complexity%20for%20particular%20OU%2C%20so%20i%20created%20a%20separate%20policy%20and%20linked%20with%20that%20OU.%20After%20apply%20this%20policy%2C%20i%20was%20unable%20to%20change%20the%20password%20for%20AD%20users%20in%20that%20OU%2C%20getting%20error%20%22Password%20does%20not%20meet%20password%20policy%20requirements%22.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20was%20suspecting%20the%20Domain%20controller%20policy%20overriding%2C%20since%20i%20am%20changing%20password%20from%20one%20of%20the%20DC.%20So%20i%20removed%20password%20policy%20restriction%20from%20Domain%20controller%20group%20policy%20but%20not%20working.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMy%20OU%20and%20Domain%20controller%20policy%20modified%20as%20below%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EEnforce%20password%20history%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20-%200%20password%20remembered%3C%2FP%3E%3CP%3EMaximum%20password%20age%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B-%200%3C%2FP%3E%3CP%3EMinimum%20password%20age%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B-%200%3C%2FP%3E%3CP%3EMinimum%20password%20length%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B-%208%20Characters%3C%2FP%3E%3CP%3EPassword%20must%20meet%20complexity%3C%2FP%3E%3CP%3Erequirements%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B-%20Disabled%3C%2FP%3E%3CP%3EStore%20password%20using%20reversible%3C%2FP%3E%3CP%3Eencryption%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20-%20Disabled%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPlease%20suggest%20solution.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1004562%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EActive%20Directory%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Occasional Visitor

We recently build new environment with Windows 2019 STD and migrated all users from old domain. I wanted to exclude password complexity for particular OU, so i created a separate policy and linked with that OU. After apply this policy, i was unable to change the password for AD users in that OU, getting error "Password does not meet password policy requirements". 

 

I was suspecting the Domain controller policy overriding, since i am changing password from one of the DC. So i removed password policy restriction from Domain controller group policy but not working.

 

My OU and Domain controller policy modified as below,

 

Enforce password history                  - 0 password remembered

Maximum password age                   - 0

Minimum password age                   - 0

Minimum password length               - 8 Characters

Password must meet complexity

requirements                                     - Disabled

Store password using reversible

encryption                                          - Disabled

 

Please suggest solution.

 

 

0 Replies