I have made security templates to reset the security to default out of the box and I still get this issue, I have also put back the previous security after this did not fix the issue.
Regards Mark -----Original Message----- From: "TIROA YANN" <[EMAIL PROTECTED]> Date: Wed, 18 May 2005 20:16:26 To:<[EMAIL PROTECTED]>, <[email protected]> Subject: RE : [ActiveDir] Unable to log you on because if a n account restriction Hello ;-) On AD 2003 Forest, password complexity is an obligation for all users login into your newly created domain, those who have not passord complexity are subjects to password restricions. The account who is responsible for installing the first DC in domain (administrator by default) is not concerned about this restriction, but only next users. Try to desactivate this restriction : 1)Navigate to- Computer Configuration->Windows Settings->Security Settings->Account Policies -> Password Policies 2)Double Click Password Must meet complexity requirements -> Check Define this policy setting -> Disable -> Apply -> OK 3) Select -> Minimum Password Length -> Double Click 4) Check Define this policy setting -> Password must be at least = 1 -> Apply - > OK 5) reboot your DC and allow replication of all your DCs to take place. Regards, Yann TIROA De: [EMAIL PROTECTED] de la part de Mark Parris Date: mer. 18/05/2005 18:30 À: [email protected] Objet : Re: [ActiveDir] Unable to log you on because if an account restriction I have already done that, And no joy. Regards Mark -----Original Message----- From: "Rick Kingslan" <[EMAIL PROTECTED]> Date: Wed, 18 May 2005 09:36:02 To:<[email protected]> Subject: RE: [ActiveDir] Unable to log you on because if an account restriction Mark, This may be a bit bizarre, but are you certain that when you restored the DCs that the passwords of the accounts went with them? I'm not certain why this might have occurred, but remember that there is an account restriction that would apply that REQUIRES a password for all principals. And, at the moment I'm not sure that it applies to the Administrator account but I would think that it does. You are using the administrator acount and a password, yes? So, what I'd suggest is to go in as the Admin, and reset the password of a another user and have that user try and log in. Let us know how that works. -rtk -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris Sent: Wednesday, May 18, 2005 6:15 AM To: [email protected] Subject: [ActiveDir] Unable to log you on because if an account restriction Dear all, I have just performed a disaster recovery of our Windows Server 2003 forest and I am now receiving the message "Unable to log you on because if an account restriction" when I try to logon with any account apart from the administrator account. I have a two domain forest X.com and child.x.com When the DC's were first restored and were not communicating with Each other I could logon using any account, now that the DC's are talking and replicating I cannot, now only the administrator account works. I have ensured the GPO's are set correctly, I can see nothing obvious in the event logs so now it's time to ask my peers if they have experienced any such issues. I have restored many forests in DR situations and never experienced this issue beforer. Thanks in advance. Mark List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
