Windows 10: What is Microsoft's password policy for Windows servers?

What is Microsoft's password policy for Windows servers?

:)

 

Accessing Password Policy in Windows 10

Hi,

Thank you for posting your query on Microsoft Community.

I understand that you would like to set Password policy. We will assist you to resolve the issue.

To assist you better, I would like to know what happened when you try to change the policy. Did you get any error message?

I suggest you to follow the below steps and check if it helps.

You must log in as administrator to access these settings.

• 
  Press Windows key + R and type secpol.msc
  and press enter.
  
• 
  The Local Security Policy window will open. Now from the left pane, choose
  Password Policy from under Account Policies.
  
• 
  On the right side, choose Maximum password age.
  
  
• 
  If you wish the password to never Expire, set the value to
  0.
  

Hope the information helps. Let us know if you need further assistance. We will be happy to help.

Thank you.

 

Server 2019 Standard - Domain Password Policy Settings Not applying

I originally made modifications in Group Policy Management Editor and tried rebooting the PDC and doing a Gpupdate /force. Nothing works. This is a single domain controller environment.

Additional steps I took:

I have gone into Group Policy Management Editor>Domains>(domain Name)>Default Domain Policy (right Click - Edit) Computer Configuration>Policies>Windows Settings>Security Settings>Account Policies>Password Policy and have modified the following fields:

Maximum password age: 90 Days

Minimum password age: 1 Days

Minimum password length: 12 Characters

Password must meet complexity requirements : enabled

Although these settings stay within the Group Policy Editor they do not seem to apply.

Then, in Powershell (as administrator) I ran:

PS C:\Windows\system32> Get-ADDefaultDomainPasswordPolicy (Results listed below)



ComplexityEnabled : False

DistinguishedName : DC=accounting,DC=local

LockoutDuration : 00:10:00

LockoutObservationWindow : 00:10:00

LockoutThreshold : 50

MaxPasswordAge : 365.00:00:00

MinPasswordAge : 00:00:00

MinPasswordLength : 7

objectClass : {domainDNS}

objectGuid : 664309cc-463b-4a6d-8b82-ed807418ba5d

PasswordHistoryCount : 24

ReversibleEncryptionEnabled : False

To test, I set Complexity Enabled via powershell (as administrator)

PS C:\Windows\system32> Set-ADDefaultDomainPasswordPolicy -Identity accounting.local -ComplexityEnabled $true

PS C:\Windows\system32> Get-ADDefaultDomainPasswordPolicy (results listed below)



ComplexityEnabled : True

DistinguishedName : DC=accounting,DC=local

LockoutDuration : 00:10:00

LockoutObservationWindow : 00:10:00

LockoutThreshold : 50

MaxPasswordAge : 365.00:00:00

MinPasswordAge : 00:00:00

MinPasswordLength : 7

objectClass : {domainDNS}

objectGuid : 664309cc-463b-4a6d-8b82-ed807418ba5d

PasswordHistoryCount : 24

ReversibleEncryptionEnabled : False

If I wait a few minutes and run the Get-ADDefaultDomainPasswordPolicy again the ComplexityEnabled changes back to False.

Next I went to RSOP.MSC and checked Computer Configuration>Windows settings>Account Policies>Password Policy and this is the results:

Policy Computer Setting Source GPO

Enforce password history 24 passwords remembered Small Business Server Domain Password Policy

Maximum password age 365 days Small Business Server Domain Password Policy

Minimum password age 0 days Small Business Server Domain Password Policy

Minimum password length 7 characters Small Business Server Domain Password Policy

Minimum password length audit Not Defined

Password must meet complexity requirements Disabled Small Business Server Domain Password Policy

Store passwords using reversible encryption Disabled Small Business Server Domain Password Policy

As you can see I get even different results through RSOP.

The account I am using is in the Domain Admins and Local\Buitin Administrators groups.

I just discovered that if I close Group Policy Management Editor and reopen it the changes did NOT stay, and the settings match RSOP.

Any help with solving this would be greatly appreciated.

 

Group Policy Server client

Hi Pips,



Thanks for posting on Microsoft Community. We regret the inconvenience caused and will assist you in resolving the issue.



Before assisting further, I would like to ask you a few questions:

• What is the exact issues you are facing on Group Policy Server client?
• Do you get any error message/error code on logging in into the user profile?
• Which “Recovery properties” did you try?

We are not clear on the exact issue you are facing regarding Group Policy Server client. Write to us the detailed description of the issue along with the answers to the above questions for further assistance.



Meanwhile, run SFC scan on the PC by following the steps below and check for the presence of corrupted or missing system files and folders.



SFC scan is a utility in Windows that allows users to scan for corruptions in Windows system files and restore corrupted files. If a
Windows Resource Protection (WRP) file is missing or is corrupted, Windows may not behave as expected. For example, some Windows functions may not work, or Windows may crash.



Step 1: Open an Administrator command prompt
window by

• Press Windows logo + X keys on the keyboard and select
  Command Prompt (Admin) option.
• Click on Yes and continue. Provide administrator password if prompted.
• Check if it says Administrator: Command Prompt at the top of the command prompt window.

Step 2: Type sfc /scannow command in the
CMD Prompt.



Step 3: Close the command window and check if the issue is resolved.



Your reply is important for us to ensure we assist you accordingly.



Thank you.