RE: [ActiveDir] Minimum Password Age

[Salandra, Justin A.]

Title: [ActiveDir] Minimum Password Age

Try taking off complex passwords and see if you can get it to work.  There are certain requirements of complex passwords that require a symbol to be in there somewhere.   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Travis Riddle Sent: Monday, October 04, 2004 12:42 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Minimum Password Age   The error message at the workstation is:   Password does not meet the requirments of the password policy. Make sure the password is meets the minimum length, complexity and age requirements or contact your system administrator.   I can set the password to something like wTh1tpo5nw? and it will not accept it.    After I set the minimimum age to 0 and joined a new computer to the domain then that user was able to change their password upon login.  I guess its just a matter of getting the policy to update before the other machines will start working.  Maybe I will set GPO to use syncronous login...ugh.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Boza Sent: Monday, October 04, 2004 9:33 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: RE: [ActiveDir] Minimum Password Age Nope, it shouldn't work like that.  I just tested it in fact with your settings and the result I get is what I expected - they are prompted with a message that "they are required to change their password at first login."  The password change then works fine.   What error are they getting? Any events on the DCs?   From: [EMAIL PROTECTED] on behalf of Travis Riddle Sent: Mon 10/4/2004 10:54 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Minimum Password Age Our password policy is set up as follows: Minimum 8 characters Remember 6 passwords Maximium Password Age 90 days Minimum Password Age 15 days Require Complex passwords Windows 2003 3 Sites GC at each site So we just created approximatly 50 new users and assigned them a semi-generic passowrd that they need to change upon login.  The problem is they cannot change their password upon login because it hasn't been 15 days since the password was created (I assume).  Is this by design? If so how do you get around it?  How am I suppose to create new users in the future if this is the case (besides creating them 15 days in advance) My first guess at a solution to this problem is to change the minimum password age to 0, allowing users to change their password immediately. I tried this and forced a refresh on the machine policy with no luck. Does anyone have any ideas of what to do? I now have 50 users that were suppose to be able to be working today not able to log in unless we change their password to NOT change upon login (so they all have the same easy to use password).  Am I missing something simple?  Any idea's are appreciated. Thanks, Travis List info   : http://www.activedir.org/mail_list.htm List FAQ    : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/