password policy is whacko

[Blaqb0x]

Hi,

I'm using Win2k3. I've set the password complexity to disabled and min
password length to 7 characters. Now I should be able to use any password
that's at least 7 characters long, right?

I tried "beef;jerkey" as my password, 11 characters. but it says

"Your password must be at least 7 characters and cannot repeat any of the
previous 1 passwords"

the previous passwords aren't even close to the one I'm trying. Any ideas?

 

[Herb Martin]

Hi,

I'm using Win2k3. I've set the password complexity to disabled and min
password length to 7 characters. Now I should be able to use any password
that's at least 7 characters long, right?

I tried "beef;jerkey" as my password, 11 characters. but it says

As long as it is a NEW password or you don't enforce
a history list.

"Your password must be at least 7 characters and cannot repeat any of the
previous 1 passwords"

the previous passwords aren't even close to the one I'm trying. Any
ideas?

It does sounds like this was your previous password, so that it
is enforcing a history list (of 1).

Have you tried a completely unique password as a test?

Have you ensured that your password policy is liked at
the DOMAIN (only) level?

Have you made sure that this policy is being applied?
GPResult on the DCs?

Have you checked replcication on the Domain (i.e.,
DCDiag on every DC with no errors or warnings)?

Have you checked that the machines are actually
authenticating (on the domain) before the user logs in?

 

[ANIXIS]

The client gets the parameters for this message from AD, so I think
that you have configured your domain password policy correctly. Could
it be that you have a password filter installed to enforce additional
rules? Have a look at the
"HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages"
registry value on your DCs.

This value contains a list of DLLs (without the DLL extension) that
could enforce a different password policy. Locate the DLLs on your
system, most likely in the system32 folder. Right-click on them and
display the version information. Are there any non-Microsoft DLLs, or
DLLs without version information?