Unable to disable password complexity in Active Directory

Question

Hi,

We're having an issue with our Active Directory password complexity. We have to change the password for non complex (there is a reason behind it). I've changed the default group policy rule, I set everything to be disabled. Same with local group policy on a domain controller itself. Restarted the server and the computer itself for just in case. Same issue:

Please help, we have to change the password to non complex to one of the generic users.

Thanks

Vlad

Answer 1

Some places to look here.

https://woshub.com/password-policy-active-directory/

then be sure to do gpupdate /force on the member for testing.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

Hi,

It may a password policy objects (PSOs) still applied on impacted user. You can identify the password policy (PSO) applied on impacted user by running the following command:

Get-ADUserResultantPasswordPolicy -Identity userName

Get-ADUserResultantPasswordPolicy

Please don't forget to mark helpful reply as answer in order to help community to identify the correct answer

Answer 3

AD only requires three of the complexity requirements to be met when setting a password. You will need to purchase a third-party password filter\control solution if you want more control over what password can set. Search for "windows ad password filter" for more options

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements