Ctive Directory Password Policy

Hello

I facing a problem with ACTIVE DIRECTORY PASSWORD POLICY which is running on windows 2003

I have implemented password policy for the users which states:

Policy Setting
Enforce password history 5 passwords remembered
Maximum password age 1 days
Minimum password age 0 days
Minimum password length 6 characters
Password must meet complexity requirements Enabled
Store passwords using reversible encryption Enabled

For Test reasons i chose for 1 days.
I did a GPUPDATE /FORCE and rebooted.

Following this i checked to see if its really been implemented using the command :
gpresult

It shows that its there is an password been there.

But after 1 day on my next log-on it never asked for a new password???? Meaning the passord Policy didnot exsist.

I search on the log file UserEnv.log on the user (Client machine) and it produces me this.
SERENV(2b4.2b 11:53:16:137 DumpOpenRegistryHandle: 2 user registry Handles leaked from \Registry\User\S-1-5-21-1876315153-1648240656-316617838-3652
USERENV(2b4.2b 11:53:16:137 UnloadUserProfileP: Didn't unload user profile <err = 5>
USERENV(2b4.2b 11:53:16:590 UnloadUserProfile: UnloadUserProfileP failed with 0
USERENV(2b0.2b4) 11:51:53:796 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2b0.2b4) 11:51:53:812 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2b0.2b4) 11:51:53:812 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2b0.bf4) 11:54:41:759 PolicyChangedThread: UpdateUser failed with 0.
USERENV(2b0.ddc) 11:55:41:553 PolicyChangedThread: UpdateUser failed with 1008.
USERENV(2b0.e90) 11:56:41:300 PolicyChangedThread: UpdateUser failed with 1008.
USERENV(2b0.f90) 11:57:41:249 PolicyChangedThread: UpdateUser failed with 1008.


Could some one please help

Rishi

[noushad]

Originally Posted by Rishi

Hello

I facing a problem with ACTIVE DIRECTORY PASSWORD POLICY which is running on windows 2003

I have implemented password policy for the users which states:

Policy Setting
Enforce password history 5 passwords remembered
Maximum password age 1 days
Minimum password age 0 days
Minimum password length 6 characters
Password must meet complexity requirements Enabled
Store passwords using reversible encryption Enabled

For Test reasons i chose for 1 days.
I did a GPUPDATE /FORCE and rebooted.

Following this i checked to see if its really been implemented using the command :
gpresult

It shows that its there is an password been there.

But after 1 day on my next log-on it never asked for a new password???? Meaning the passord Policy didnot exsist.

I search on the log file UserEnv.log on the user (Client machine) and it produces me this.
SERENV(2b4.2b 11:53:16:137 DumpOpenRegistryHandle: 2 user registry Handles leaked from \Registry\User\S-1-5-21-1876315153-1648240656-316617838-3652
USERENV(2b4.2b 11:53:16:137 UnloadUserProfileP: Didn't unload user profile <err = 5>
USERENV(2b4.2b 11:53:16:590 UnloadUserProfile: UnloadUserProfileP failed with 0
USERENV(2b0.2b4) 11:51:53:796 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2b0.2b4) 11:51:53:812 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2b0.2b4) 11:51:53:812 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2b0.bf4) 11:54:41:759 PolicyChangedThread: UpdateUser failed with 0.
USERENV(2b0.ddc) 11:55:41:553 PolicyChangedThread: UpdateUser failed with 1008.
USERENV(2b0.e90) 11:56:41:300 PolicyChangedThread: UpdateUser failed with 1008.
USERENV(2b0.f90) 11:57:41:249 PolicyChangedThread: UpdateUser failed with 1008.


Could some one please help

plz chek that the tab "password never expires" on the properties of the user
if it is ticked, the passsword policy dont be effected.
i think this advice will solve ur problem....
Noushad.k
MCSE doing
cochin

noushad