Disable Password Policy

7/30/2015 ServerCore.
Net » Blog Archive » How to disable Password complexity on Server Core installations
ServerCore.Net
Finding our way on the commandline
type keyword here ...
HOME
About
How to disable Password complexity on Server Core installations
Posted by Sander Berkouwer on January 14th, 2014 | 2 comments
I feel Microsoft is doing a great job when it comes to the default security of their
products. I’m not the only one, as Microsoft attitude towards security and user
friendliness has even earned it kudos in the keynote of the Australian Linux Conf
last week for its default SecureBoot implementations on OEM hardware.
However, many people struggle with the default password requirements in
Windows Server. While it’s pretty easy to change the password requirements in
Server with a GUI installations, it’s not that straightforward on Server Core
installations. So, here’s a detailed howto:
First, perform your Server Core installation and provide a complex password for the builtin
Administrator account, when you’re prompted to do so after the initial installation. This
password must meet the following requirements:
1. Passwords cannot contain the user’s account name or parts of the user’s full name that
exceed two consecutive characters.
2. Passwords must be at least six characters in length.
3. Passwords must contain characters from three of the following four categories:
1. English uppercase characters (A through Z).
2. English lowercase characters (a through z).
3. Base 10 digits (0 through 9).
4. Nonalphabetic characters (for example, !, $, #, %)
Now, while logged on as this user, open a command prompt.
Type the following command:
secedit.exe /export /cfg C:\secconfig.cfg
http://servercore.net/index.php/2014/01/howtodisablepasswordcomplexityonservercoreinstallations 1/7
7/30/2015 ServerCore.Net » Blog Archive » How to disable Password complexity on Server Core installations
This will dump the security configuration settings of the local computer to the file
C:\secconfig.cfg.
Open Notepad by typing Notepad.exe on the command prompt. In Notepad, use the Open…
command from the File menu or Ctrl+O to open C:\secconfig.cfg. In the Open window,
click on This PC in the left pane and then select Local Disk (C:). In the bottom right corner
change the selection criteria from Text documents (*.txt) to All Files.
Now, select secconfig.cfg, doubleclick it or click Open.
In secconfig.cfg we’re going to need to change the value for PasswordComplexity from 1
to 0. Scroll down, until you get to the line that reads PasswordComplexity = 1. Change the 1
to 0. Of course, you can also use Ctrl+F to find it. When you’re really lazy (like I am), you
can also deploy a straight Ctrl+H to replace PasswordComplexity = 1 to
PasswordComplexity = 0.
Tip!
When you also dislike the passwords of accounts expiring, you can also configure that here.
Looking to enable the guest account? Go ahead.
When done, use the Save command from the File menu to save the new settings to the file.
Next, close Notepad by either clicking on the red tab in the top right corner of the
application or by pressing Alt+F4.
To load the edited file as your new security configuration, use the following command:
secedit.exe /configure /db %windir%\securitynew.sdb /cfg C:\secconfig.cfg /areas
SECURITYPOLICY
The new Security configuration will apply to all password changes and new password. So,
you can change the password for the builtin administrator to whatever you like:
net user .\administrator Z
In the example above, we’ve given the password ‘Z’ to the administrator.
Further reading
Windows Web Server 2008 R2 Server Core local password complexity
HOWTO: Disable complex password policy on HyperV Server 2008?
Disable complexity password on Windows 2008 Server Core
You can follow any responses to this entry through the RSS 2.0 feed.
Comments
1.
On January 23, 2015 JoeBob says:
You have some spelling errors in the command lines which makes us lazy people work harder. We
can’t copy and paste your posted cmds.
2.
On January 23, 2015 Sander Berkouwer says:
Hi JoeBob,
Thank you for your reply.
I noticed the commands were all missing backslashes. The screenshots featured them all. The
removal of the backslashes in the text was probably caused by the recent migration, that relied on
exporting and then importing blogposts.
I have added the backslashes for your convenience.
Name (required)
Mail (will not be published) (required)
Website
XHTML: You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite="">
<cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>
Submit Comment
RSS POSTS
RSS COMMENTS
type keyword here ...
Recent Posts
My Server Core April Fools’ Day Prank
Server Core installations now benefit from Windows Defender, too.
How to disable Password complexity on Server Core installations
Statistics on 2013
Upgrade your Windows Server 2012 R2 RTM Server Core Installs
Recent Comments
Sander Berkouwer on How to disable Password complexity on Server Core installations
JoeBob on How to disable Password complexity on Server Core installations
Jose on KnowledgeBase: Unable to convert to Server with a GUI from Server Core on an
upgraded Windows Server 2012 machine
muhWhothcat on 3rd Party management applications and Server Core
Tessie on 3rd Party management applications and Server Core
Archives
March 2015
June 2014
January 2014
December 2013
October 2013
September 2013
August 2013
July 2013
April 2013
March 2013
February 2013
January 2013
December 2012
November 2012
October 2012
August 2012
July 2012
March 2012
February 2012
December 2011
September 2011
July 2011
January 2011
October 2010
September 2010
August 2010
July 2010
June 2010
May 2010
Categories
Active Directory
Bad Practices
Best Practices
Community
Features on Demand
Group Policy
HyperV
HyperV Server 2008 R2
HyperV Server 2012
HyperV Server 2012 R2
KnowledgeBase Articles
MinShell
PowerShell
Server Core
Uncategorized
Windows Firewall
Windows Server 2008
Windows Server 2008 R2
Windows Server 2012
Windows Server 2012 R2
Windows Server 8
Meta
Log in
Entries RSS
Comments RSS
WordPress.org
Copyright © 2010 2015 ServerCore.Net

Disable Password Policy

Încărcat de

Informații document

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

Disable Password Policy

Încărcat de

Drepturi de autor:

Formate disponibile

7/30/2015 ServerCore.

S-ar putea să vă placă și