HOWTO: Disable complex password policy on Hyper-V Server 2008?
How do you disable the password complexity requirements on a Microsoft Hyper-V Server 2008 R2?
Keep in mind that when you log into the server, the only UI you have is:
And you cannot run gpedit.msc:
C:\Users\Administrator>gpedit.msc
'gpedit.msc' is not recognized as an internal or external command,
operable program or batch file.
because there are no .msc snap-ins installed with Microsoft Hyper-V Server 2008 R2.
The problem comes when you're trying to add an account to the server, so you can manage it, but it doesn't like most passwords:
And, predictably, typing
NET HELPMSG 2245
gives you
The password does not meet the password policy requirements. Check the minimum p
assword length, password complexity and password history requirements.
i hoped it would have been a friendly user experience, and either:
- offered to disable the password policy
- tell me how to disable the password policy
- tell me how to check the minimum password length, password complexity and password history requirements.
Password Complexity Requirements
The Microsoft's default password complexity for Server Core is:
- Passwords cannot contain the user’s account name or parts of the user’s full name that exceed two consecutive characters.
- Passwords must be at least six characters in length.
-
Passwords must contain characters from three of the following four categories:
1.English uppercase characters (A through Z).
2.English lowercase characters (a through z).
3.Base 10 digits (0 through 9).
4.Non-alphabetic characters (for example, !, $, #, %).
External links
- Technet Forums: Hyper-V Server disable complex passwords
- Technet: Passwords must meet complexity requirements of the installed password filter
Update: 2k views? So many people keep coming coming to it: up-vote it!
You can export security settings with:
secedit /export /cfg X:\new.cfg
Then you edit new.cfg (it is ini format) and change line "PasswordComplexity = 1" to "PasswordComplexity = 0". Apply it on Hyper-V server with:
secedit /configure /db C:\Windows\security\new.sdb /cfg X:\new.cfg /areas SECURITYPOLICY
You can find more details in this blog post.