Default Domain Policy - Password Policies Not Applying Cor..

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi all

I have a Windows 2000 domain which has had a default password policy of the
following set in the past :-

Password must be 5 chars long
Change every 42 days
lockout after 6 invalid attempts

Whenever I try to change these settings in the Default Domain Policy, they
initially take, but the password length re-sets itself to 0 chars, lockout
re-sets to 6, and when I enable password complexity, it disables itself!

I have an ASP script that reads these settings, and I've seen the lockout
threshold change from 5 to 6 and back to 5 many times over a few hours (5 is
what I was trying to set it to) after I've made the changes (ie I've done the
changes once and not done anything since).

Anyone got any ideas?

Thanks in advance.

Andy

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Sorry, I forgot to mention that I have currently set the password length and
password change days policies to 'Not Configured', yet in my ASP (the code
for which checks the default domain password settings and was taken directly
from the Microsoft Technet Script Repository) page it still says that the
policy is set to a password length of 5 chars and change every 42 days.

This has been verified when I change a password as I can't set any password
less than 5 chars.

Cheers