GPO Password change Active Directory 2008

Discussion and support for the Windows family of operating systems.
Post Reply
skunkymunky
Permanently Banned
Posts: 5906
Joined: 04 Mar 2003, 02:00
Location: The HoffPalace

GPO Password change Active Directory 2008

Post by skunkymunky »

Hi All

My Users are unable to change their Passwords, even though the group policy is enabled.
It counts down the users i.e. telling them they have 12 days etc. to change their password. But when a user changes it, the PC gives the error like the one on the second screenshot.

The first screenshot is of the Group policy settings.

Image

Image
Fool people into thinking youve got a horse by taking off a unicorns horn
User avatar
rustypup
Registered User
Posts: 8872
Joined: 13 Dec 2004, 02:00
Location: nullus pixius demonica
Contact:

Re: GPO Password change Active Directory 2008

Post by rustypup »

user manager conflict restriction on blank passwords?

start->run->cmd on one of the affected clients and enter "net accounts" to verify...
Most people would sooner die than think; in fact, they do so - Bertrand Russel
skunkymunky
Permanently Banned
Posts: 5906
Joined: 04 Mar 2003, 02:00
Location: The HoffPalace

Re: GPO Password change Active Directory 2008

Post by skunkymunky »

Yep can see the problem but...

This machine is on a domain, shouldn't the PDC GPO take precedence over the workstation one.
Surely i can't be expected to change this on 230 computers.
Fool people into thinking youve got a horse by taking off a unicorns horn
User avatar
rustypup
Registered User
Posts: 8872
Joined: 13 Dec 2004, 02:00
Location: nullus pixius demonica
Contact:

Re: GPO Password change Active Directory 2008

Post by rustypup »

/bows out.

not really one of my strengths, but have you tried enforcing the base policy again?

the console should, technically, report any apply errors...
Most people would sooner die than think; in fact, they do so - Bertrand Russel
skunkymunky
Permanently Banned
Posts: 5906
Joined: 04 Mar 2003, 02:00
Location: The HoffPalace

Re: GPO Password change Active Directory 2008

Post by skunkymunky »

i ran the "gpupdate /force" command

Everything is successful, i can see some of my other policies do apply, like blocking certain programs etc.
Except the password policy.
Fool people into thinking youve got a horse by taking off a unicorns horn
Post Reply