About Password Policy

Policies in Active Directory are only applied to specific users or computers for which the policies are applied to. When you are in Active Directory you have administrative rights over those accounts and the policy is not enforced.

Anurag,

I understand fully what you mean because we have exactly the same problem.

I can reset a users password from active directory .
( Fom Active Directory users and computers on any server or my Pc which has the AD Snap-In).

However i can't reset their domain password for them at their OWN PC.
It will reset for some users but not for other in our case at our organisation. This seems to be user specific. As i can reset some user who are in the same OU.

I can set some peoples passwords say from my PC by loggin them into my PC & clicking the Cntrl ALT Del > Change password but it doesn't work this way for all my users.

What's going on here does anyone know?
Strong password also don't work if you use certain chracters behind each other for example
if we try to use a capital letter then folowed by an @ symbol it will not allow us to change the users password locally but again does allow us to do so from AD on the the server/Snap-in.

If you do get this sorted can you drop in a comment as i have "I would like to be notified checked. Also if i manage to work this out i will follow up for you"

cheers Good luck

Hi Jim,

In your Ad Domain Policy this option is checked or not
Computer Configuration\Windows Settings\Security Settings\AccountPolicies\Password Policy and also if you are not able to change the password through users PC then what is the value in enforce password history option.
Thanks and Regards.
Anurag.