Home | Site Map | Cisco How ToNet How To | Wireless |Search | Forums | Services | Donations | Careers | About Us | Contact Us|

Group Policy Password Options Grayed Out in Windows 2008

Permissions, Group Policy, IPSec, Virus, Spam, Spyware, Malware.

Group Policy Password Options Grayed Out in Windows 2008

Postby fenton » Mon Oct 12, 2009 7:43 pm

I'm attempting to change the password policy for my domain. I'm running a single domain controller in my domain and I'm at the computer console, not logged in remotely. I've started the group policy editor and navigated to the proper place. I can display the current settings but I cannot change any of them. I am logged in as Administrator and also belong to the Domain Admin group. Can someone tell me why I'm not allowed to change the password policy? Thanks in advance for any help that can be provided.
fenton
 
Posts: 421
Joined: Mon Dec 04, 2006 3:25 pm

Re: Group Policy Password Options Grayed Out in Windows 2008

Postby fenton » Mon Oct 12, 2009 7:44 pm

how are you trying to change them

are you using secpol.msc, if not please try using secpol.msc and try it.


reference
http://social.technet.microsoft.com/For ... 1e0a44d08/
fenton
 
Posts: 421
Joined: Mon Dec 04, 2006 3:25 pm

Re: Group Policy Password Options Grayed Out in Windows 2008

Postby fenton » Mon Oct 12, 2009 8:41 pm

Hi,

I have installed Win 2008 Enterprises edition, i need to change the Password Policy, But the Security Settings is Locked. How to Unlock the Security Settings? Please help me to Unlock...
fenton
 
Posts: 421
Joined: Mon Dec 04, 2006 3:25 pm

Re: Group Policy Password Options Grayed Out in Windows 2008

Postby fenton » Mon Oct 12, 2009 8:42 pm

Hi,

Could you please tell me more information about your environments? What’s the meaning of the “lock” you mentioned? Did you mean the Password Policy options are grayed out?

If the Windows Serve 2008 is a standalone computer, and the user you are using has the local administrators rights, you can access the Password Policy and do some change.

If the Windows Server 2008 is in a domain environment, this problem may occur when a domain group policy has defined the policy settings on the domain server. In this case, the corresponding local group policy option will be grayed out. This is expected behavior.

Please perform the following steps to check whether a domain group policy has defined the settings:

1. Logon as administrator, click Start -> Run, type "rsop.msc" in the text box, and click OK.

2. Locate the [Computer Configuration\Windows Settings\Security Settings\Local Policies\Account Policies\Password Policies] item.

3. Check whether the corresponding password options are set. If so, the "Source GPO" column displays the policy that defines this policy.





If you want to change the domain group policy, you will need to contact your domain administrator.





Best regards,

Vincent Hu
fenton
 
Posts: 421
Joined: Mon Dec 04, 2006 3:25 pm

Re: Group Policy Password Options Grayed Out in Windows 2008

Postby fenton » Mon Oct 12, 2009 8:53 pm

These steps don't work on a new Windows 2008 Standard Domain Controller installation. RSOP.msc simply comes up with a group policy error stating that there are no mappings between account names and security IDs.

To be clear, this is a brand new forest with a brand new single domain which I installed a clean Windows Server 2008 standard and all of the various Windows updates. Thats it.

Is there a DIFFERENT way to unlock the security settings (i.e., without using RSOP)? In particular, the Password policy options are all greyed out.
Thank you.


UPDATE: I found the steps:

To turn password complexity off in Windows 2008 Server or change other grayed oout security options, follow these steps:

(1) run gpmc.msc (Group Policy Management)

(2) Expand your Domain

(3) Go to <Group Policy Objects> and select <Default Domain Policy>

(4) Expand: <Computer Configurations> <Policies> <Windows Settings> <Security Settings> <Account Policies> <Password Policy>

(5) Disable Password Complexity or change any other settings as desired.

This is the only way to disable Password Complexity in Server 2008. The
local Security Policy can not be used for changing Password Complexity
in Server 2008.
fenton
 
Posts: 421
Joined: Mon Dec 04, 2006 3:25 pm

Re: Group Policy Password Options Grayed Out in Windows 2008

Postby fenton » Mon Oct 12, 2009 8:53 pm

One complement only.. after the steps 4 and 5:

(4.1) rigth click.. and select <Edit> (its impossible to make change in the GPM.. only in the Editor)
(4.2) again.. Expand: <Computer Configurations> <Policies> <Windows Settings> <Security Settings> <Account Policies> <Password Policy>
(4.3) 2 clicks in the <Password must meet complexity requirements>

(5.1) close the Editor
(5.2) and than refresh the GPM

if it does not work.. way a time.. or

(6) run: gpupdate /Force

is this. I've helped.
fenton
 
Posts: 421
Joined: Mon Dec 04, 2006 3:25 pm


Return to Security

Your Ad Here

Who is online

Users browsing this forum: No registered users and 1 guest