Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > General Computer Discussion > Software > Ctive Directory Password Policy

Reply
Thread Tools

Ctive Directory Password Policy

 
 
Rishi Rishi is offline
Junior Member
Join Date: Aug 2006
Posts: 2
 
      08-28-2006
Hello

I facing a problem with ACTIVE DIRECTORY PASSWORD POLICY which is running on windows 2003

I have implemented password policy for the users which states:

Policy Setting
Enforce password history 5 passwords remembered
Maximum password age 1 days
Minimum password age 0 days
Minimum password length 6 characters
Password must meet complexity requirements Enabled
Store passwords using reversible encryption Enabled

For Test reasons i chose for 1 days.
I did a GPUPDATE /FORCE and rebooted.

Following this i checked to see if its really been implemented using the command :
gpresult

It shows that its there is an password been there.

But after 1 day on my next log-on it never asked for a new password???? Meaning the passord Policy didnot exsist.

I search on the log file UserEnv.log on the user (Client machine) and it produces me this.
SERENV(2b4.2b 11:53:16:137 DumpOpenRegistryHandle: 2 user registry Handles leaked from \Registry\User\S-1-5-21-1876315153-1648240656-316617838-3652
USERENV(2b4.2b 11:53:16:137 UnloadUserProfileP: Didn't unload user profile <err = 5>
USERENV(2b4.2b 11:53:16:590 UnloadUserProfile: UnloadUserProfileP failed with 0
USERENV(2b0.2b4) 11:51:53:796 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2b0.2b4) 11:51:53:812 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2b0.2b4) 11:51:53:812 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2b0.bf4) 11:54:41:759 PolicyChangedThread: UpdateUser failed with 0.
USERENV(2b0.ddc) 11:55:41:553 PolicyChangedThread: UpdateUser failed with 1008.
USERENV(2b0.e90) 11:56:41:300 PolicyChangedThread: UpdateUser failed with 1008.
USERENV(2b0.f90) 11:57:41:249 PolicyChangedThread: UpdateUser failed with 1008.


Could some one please help
 
Reply With Quote
 
 
 
 
noushad noushad is offline
Junior Member
Join Date: Nov 2006
Posts: 1
 
      11-23-2006
Quote:
Originally Posted by Rishi
Hello

I facing a problem with ACTIVE DIRECTORY PASSWORD POLICY which is running on windows 2003

I have implemented password policy for the users which states:

Policy Setting
Enforce password history 5 passwords remembered
Maximum password age 1 days
Minimum password age 0 days
Minimum password length 6 characters
Password must meet complexity requirements Enabled
Store passwords using reversible encryption Enabled

For Test reasons i chose for 1 days.
I did a GPUPDATE /FORCE and rebooted.

Following this i checked to see if its really been implemented using the command :
gpresult

It shows that its there is an password been there.

But after 1 day on my next log-on it never asked for a new password???? Meaning the passord Policy didnot exsist.

I search on the log file UserEnv.log on the user (Client machine) and it produces me this.
SERENV(2b4.2b 11:53:16:137 DumpOpenRegistryHandle: 2 user registry Handles leaked from \Registry\User\S-1-5-21-1876315153-1648240656-316617838-3652
USERENV(2b4.2b 11:53:16:137 UnloadUserProfileP: Didn't unload user profile <err = 5>
USERENV(2b4.2b 11:53:16:590 UnloadUserProfile: UnloadUserProfileP failed with 0
USERENV(2b0.2b4) 11:51:53:796 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2b0.2b4) 11:51:53:812 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2b0.2b4) 11:51:53:812 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2b0.bf4) 11:54:41:759 PolicyChangedThread: UpdateUser failed with 0.
USERENV(2b0.ddc) 11:55:41:553 PolicyChangedThread: UpdateUser failed with 1008.
USERENV(2b0.e90) 11:56:41:300 PolicyChangedThread: UpdateUser failed with 1008.
USERENV(2b0.f90) 11:57:41:249 PolicyChangedThread: UpdateUser failed with 1008.


Could some one please help


plz chek that the tab "password never expires" on the properties of the user
if it is ticked, the passsword policy dont be effected.
i think this advice will solve ur problem....
Noushad.k
MCSE doing
cochin
 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Password policy (password expiry after certain time) morph Cisco 0 05-20-2008 08:46 PM
Active Directory Password Policy Battousai General Computer Support 2 10-01-2007 03:11 PM
Effects of Updating the Active Directory Password Policy nasteric MCSE 6 08-28-2006 03:43 AM
Default Domain Policy vs Default Domain Controller Policy Tyler Cobb MCSE 6 10-19-2005 09:36 PM
Default Domain Policy vs. Default Domain Controller Policy Tyler Cobb MCSA 1 10-09-2005 03:42 PM



Advertisments