Change the password complexity policy in Windows Server 2008


After the installation of a Windows Server 2008 at a customer a user had to be created, nothing special sofar. A user without a password, that was likely more special, when we tried to change the password, the system answered with the message "The value provided for the new password does not meet the length, complexity, or history requirements of the domain".  We had to change the Password Security Policy which prevented the creation of an account without password.

With a normal Windows Server 2008 installation the password security policy is disabled, when the server is configured as a domain controller, the policy will be enabled. When you want to disable the policy, you can not use the local security policy editor. It is simply a domain group policy that has to be changed. Follow the following steps to change the policy:

1. Start the Group Policy Management Console (run gpmc.msc)

2. Expand the domain, go to <Group Policy Objects> and choose <Default Domain
Policy>

3. Go to <Computer Configurations> <Policies> <Windows Settings>
<Security Settings> <Account Policies> <Password Policy>

4. Disable the password policy. 



At the end, you allways have to search a little bit before it is done. Hopefully this tip will help you. More information on the password security policy and the problems on the message "The value provided for the new password does not meet the length, complexity, or history requirements of the domain" can be found on http://technet.microsoft.com/en-us/library/cc264456.aspx