General discussion


About Password Policy

By ask_anurag ·
I have a question that in active directory we set password policy "Enforce Password History" and user has to keep password for a day. When user is trying to change the password from his/her pc she gets error message.
But we can change the password through Active Directory Users and Computers and at that time we don't get error message even if we give same password.
I want to know why we don't get error message but users gets it.
I hope you understand my question.
Thanks and Regards.

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by rpreuss In reply to About Password Policy

Policies in Active Directory are only applied to specific users or computers for which the policies are applied to. When you are in Active Directory you have administrative rights over those accounts and the policy is not enforced.

Collapse -

by JimKlallsoo In reply to About Password Policy


I understand fully what you mean because we have exactly the same problem.

I can reset a users password from active directory .
( Fom Active Directory users and computers on any server or my Pc which has the AD Snap-In).

However i can't reset their domain password for them at their OWN PC.
It will reset for some users but not for other in our case at our organisation. This seems to be user specific. As i can reset some user who are in the same OU.

I can set some peoples passwords say from my PC by loggin them into my PC & clicking the Cntrl ALT Del > Change password but it doesn't work this way for all my users.

What's going on here does anyone know?
Strong password also don't work if you use certain chracters behind each other for example
if we try to use a capital letter then folowed by an @ symbol it will not allow us to change the users password locally but again does allow us to do so from AD on the the server/Snap-in.

If you do get this sorted can you drop in a comment as i have "I would like to be notified checked. Also if i manage to work this out i will follow up for you"

cheers Good luck

Collapse -

by ask_anurag In reply to About Password Policy

Hi Jim,

In your Ad Domain Policy this option is checked or not
Computer Configuration\Windows Settings\Security Settings\AccountPolicies\Password Policy and also if you are not able to change the password through users PC then what is the value in enforce password history option.
Thanks and Regards.

Related Discussions

Related Forums