{"id":1563,"date":"2008-05-12T06:37:00","date_gmt":"2008-05-12T06:37:00","guid":{"rendered":"https:\/\/blogs.msdn.microsoft.com\/cesardelatorre\/2008\/05\/12\/disabling-domain-account-security-policies-in-windows-server-2008-dc\/"},"modified":"2008-05-12T06:37:00","modified_gmt":"2008-05-12T06:37:00","slug":"disabling-domain-account-security-policies-in-windows-server-2008-dc","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/cesardelatorre\/disabling-domain-account-security-policies-in-windows-server-2008-dc\/","title":{"rendered":"Disabling Domain Account Security Policies in Windows Server 2008 DC"},"content":{"rendered":"

Just a tip I always have to do when setting up a Windows Server 2008 VPC (Virtual PC) which is also a DC (Active Directory Domain Controller).<\/P>\n

As those machines are just for demos or development environment, I do not want to have the Domain account policies which are quite strict, otherwise I’ll have to change the password after several days (42 days), using complex passwords, etc.<\/P>\n

To do so, in your Windows Server 2008 DC (usually a VPC) open the Admin.Tools–>Group Policy Management and go to the Forest–>Domain–>Default Domain Policy. There you can see (within Account policies and password policy) all the policies which are being applied to your DC:<\/P>\n

\"image\"<\/A> <\/P>\n

In my case, I want to disable the “Maximum password age” from 42 days to “never” and also about the “password complexity”.<\/P>\n

So, if you want to edit those policies, you gotta go to the “More actions” menu (up right) and select “Edit”. Then, another tool is opened. It is called “Group Policy Management Editor<\/STRONG>” (you could open it directly, of course, using the MMC).<\/P>\n

Then you have to open the “Computer Configuration–>Policies–>Windows Settings–>Security Settings–>Account Policies”. At this time, you’ll have to see the following window:<\/P>\n

\"image\"<\/A> <\/P>\n

And from here, you can double click on any item and change its value. \ud83d\ude42<\/P>\n

BTW, do not do this in a production environment, as you ar lowering the “security bar”. But, for a dev\/demo machine, it is ok. \ud83d\ude42<\/P><\/p>\n","protected":false},"excerpt":{"rendered":"

Just a tip I always have to do when setting up a Windows Server 2008 VPC (Virtual PC) which is also a DC (Active Directory Domain Controller). As those machines are just for demos or development environment, I do not want to have the Domain account policies which are quite strict, otherwise I’ll have to […]<\/p>\n","protected":false},"author":362,"featured_media":12806,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[120],"class_list":["post-1563","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cesardelatorre","tag-windows-server-2008"],"acf":[],"blog_post_summary":"

Just a tip I always have to do when setting up a Windows Server 2008 VPC (Virtual PC) which is also a DC (Active Directory Domain Controller). As those machines are just for demos or development environment, I do not want to have the Domain account policies which are quite strict, otherwise I’ll have to […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/cesardelatorre\/wp-json\/wp\/v2\/posts\/1563","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/cesardelatorre\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/cesardelatorre\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/cesardelatorre\/wp-json\/wp\/v2\/users\/362"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/cesardelatorre\/wp-json\/wp\/v2\/comments?post=1563"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/cesardelatorre\/wp-json\/wp\/v2\/posts\/1563\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/cesardelatorre\/wp-json\/wp\/v2\/media\/12806"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/cesardelatorre\/wp-json\/wp\/v2\/media?parent=1563"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/cesardelatorre\/wp-json\/wp\/v2\/categories?post=1563"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/cesardelatorre\/wp-json\/wp\/v2\/tags?post=1563"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}