help me...

[Sushil]

I am undergoing some serious problem in my domain
controller. I want to write some informations first.

1. I have 2 DC's and they are replicated with eachother. I
have kept ISA server 2000 in integrated mode in DC2 for
some time only. I found one user of my domain was locked
down and I can not unlock that user and also couldn't
reset the password. So I deleted that user from Active
Directory Users and Computers MMC in DC1 which is my main
domain controller with global catalog server. When i tried
to create new user, i found the following error.

- windows cannot set the password for "USERNAME". The
password doesnot meet the password policy
requirement.check the minimum password length,password
complexity and password history requirements. windows will
attempt to recreate the user object. Contact your system
administrator.

for your kind information, I haven't set any password
policy. But one thing to note here is that when I try to
Edit the Group Policy of domain controller, mydomain, and
OU's, I found the following error again.

- Failed to open Group Policy Object. You may not have
appropriate rights. Deatails: The network path was not
found.( ...I AM USING THE USER ADMINISTRTOR)

Hoping to get solutions soon. Thanking you.
..

 

[Guest]

Password policies = one per domain so youshould be modding default domain gpo, the user to be run as is a member of domain admins group - if you have reskit - cmd line - globalgroup "domain Admins

Should all else fails (im assuming gpo is corrupted), use security config and analysis and restore the basic security settings?

 

[Cary Shultz [A.D. MVP]]

Sushil,

I think that you have been working on this for awhile now, correct?

Take a look at the Domain Security Policy which is found at Start | Programs
| Administrative Tools.

You can also type in net accounts at a command prompt on the Domain
Controllers. Verify that 1) whatever the output is that it is the same on
all Domain Controllers and 2) that it is what you think it should be.

HTH,

Cary

 

[Sushil]

Appreciated your suggestion.You are right that i am
working in this since sometime but can't get any proper
solution till date. As per you, when i go to Domain
Security Policy, I got the following error:

- Failed to open Group Policy Object. You may not have
appropriate rights.
Details:
The Network path was not found. or I also get sometime
this error in details: The system can not find the path
specified.

It also read the same error when i tried to look on Domain
Controller Security Policy from Start |Programs |
Administrative tools | Domain Controller Security Policy.

pls help.