Why won't server 2008 let me change my password policy?

Question

I need to keep the same password indefinitely for the administrator account on a Windows Server 2008 machine. I've found Start | Administrative Tools | Local Security Policy, but whether or not I run this as an administrator, the controls for editing things like 'Enforce password history' are greyed out. How can I edit the policy?

(I have the same problem when I access the console via gpedit.msc.)

This comes up waaay too often for service accounts. – joshudson Oct 06 '11 at 15:39 — joshudson, Oct 06 '11 at 15:39

score 3 · Answer 1 · edited Jan 08 '16 at 11:15

This is how i did it. (for others with the same question)

Start > Run > gpmc.msc

Right click

Default Domain Policy > Edit

Expand:

Computer Configuration > Policies > Windows Settings > Security Settings > Account Policies > Password Policy

You will see the password policies.

Double click on one of them and change to your need!

You may need to run gpupdate for a fast group policy update.

score 1 · Answer 2 · edited Apr 13 '17 at 12:14

1

I guess you're on a domain so local policy options aren't available - I think you need the Group Policy Management Console instead.

The path outlined in this earlier SF post is the way to go.

edited Apr 13 '17 at 12:14

Community

1

answered Jan 05 '10 at 18:32

MartW

1,305
10
15

OS can't find gpmc.msc. Hm. Guess I need to do some research on Active Directory. Thanks for the lead, though. – Tommy Herbert Jan 06 '10 at 10:17

Why won't server 2008 let me change my password policy?

2 Answers2