|
Question : Chang AD password to not meet complexity?
|
|
I need to change a password for a user account in a Server 2003 domain. The problem is I need to set the password to something that does not meet the complexity requirements imposed on the domain. I tried using an ADSI script with objUser.SetPassword(), but it still checks the complexity and subsequently fails.
I know I can disable the complexity across the whole domain, but that's like blowing up your house to kill a cockroach inside.
Is there any way to change an AD password on a user account to something that does not meet the complexity requirements? If so, how?
|
|
Answer : Chang AD password to not meet complexity?
|
|
Unfortunately what you're describing will not be possible until Longhorn. In 2000 & 2003 AD, you can only have one password policy per domain; you cannot disable the complexity requirement for one user or a subset of users within the domain.
It gets better in Longhorn, though I know that doesn't help you now. Your only current option, as you describe, is the "blowing up your house" choice.
Wish I had better news for you.
Laura E. Hunter - Microsoft MVP: Windows Server - Networking
|
|
|
|