Home / server / Questions / 62709
Accepted
Ian Boyd
Asked: 2009-09-06 08:25:45 +0800 CST

HOWTO: Disable complex password policy on Hyper-V Server 2008?

  • 772

How do you disable the password complexity requirements on a Microsoft Hyper-V Server 2008 R2?

Keep in mind that when you log into the server, the only UI you have is:

alt text

And you cannot run gpedit.msc:

C:\Users\Administrator>gpedit.msc
'gpedit.msc' is not recognized as an internal or external command, 
operable program or batch file.

because there are no .msc snap-ins installed with Microsoft Hyper-V Server 2008 R2.

The problem comes when you're trying to add an account to the server, so you can manage it, but it doesn't like most passwords:

alt text

And, predictably, typing

NET HELPMSG 2245

gives you

The password does not meet the password policy requirements. Check the minimum p
assword length, password complexity and password history requirements.

i hoped it would have been a friendly user experience, and either:

  • offered to disable the password policy
  • tell me how to disable the password policy
  • tell me how to check the minimum password length, password complexity and password history requirements.

Password Complexity Requirements

The Microsoft's default password complexity for Server Core is:

  • Passwords cannot contain the user’s account name or parts of the user’s full name that exceed two consecutive characters.
  • Passwords must be at least six characters in length.

  • Passwords must contain characters from three of the following four categories:

    1.English uppercase characters (A through Z).

    2.English lowercase characters (a through z).

    3.Base 10 digits (0 through 9).

    4.Non-alphabetic characters (for example, !, $, #, %).

External links

Update: 2k views? So many people keep coming coming to it: up-vote it!

security

2 Answers

  1. Best Answer

    You can export security settings with:

    secedit /export /cfg X:\new.cfg

    Then you edit new.cfg (it is ini format) and change line "PasswordComplexity = 1" to "PasswordComplexity = 0". Apply it on Hyper-V server with:

    secedit /configure /db C:\Windows\security\new.sdb /cfg X:\new.cfg /areas SECURITYPOLICY

    You can find more details in this blog post.

    • 16

  2. Open Local Security Policy by clicking the Start button Picture of the Start button, typing secpol.msc into the search box, and then clicking secpol.‌ Administrator permission required If you're prompted for an administrator password or confirmation, type the password or provide confirmation.

    In the left pane, double-click Account Policies, and then click Password Policy.

    Double-click the item in the Policy list that you want to change, change the setting, and then click OK.

    • 0