Focus on Microsoft
AD Password complexity - passwords too long? May 19 2009 04:32PM
dgonzalez itpro gmail com (6 replies)
Re: AD Password complexity - passwords too long? May 20 2009 02:40AM
Torsten Pihl (thorgolucky gmail com) (1 replies)
RE: AD Password complexity - passwords too long? May 20 2009 06:43PM
Jason Hurst (Jason Hurst PandaRG com) (1 replies)
Re: AD Password complexity - passwords too long? May 20 2009 10:20PM
Anthony Petito (anthonypetito gmail com)
Re: AD Password complexity - passwords too long? May 20 2009 12:30AM
ews (ews tellurian net) (2 replies)
RE: AD Password complexity - passwords too long? May 22 2009 09:08PM
Quark IT - Hilton Travis (Hilton QuarkIT com au)
Re: AD Password complexity - passwords too long? May 20 2009 07:58PM
Ansgar Wiechers (bugtraq planetcobalt net)
RE: AD Password complexity - passwords too long? May 19 2009 06:11PM
Cruz, Dariel (dcruz gableseng com) (1 replies)
Re: AD Password complexity - passwords too long? May 20 2009 02:32AM
Anthony Petito (anthonypetito gmail com)
RE: AD Password complexity - passwords too long? May 19 2009 05:50PM
Brian K. Dore (bkd louisiana edu) (3 replies)
AD allows 127 characters. I have (progmatically) set passwords up to this
length. Win9x were limited to 14 IIRC. Some people may have incorrectly
assumed that the AD limit is based on the length of the password field in
the interactive dialog box which is something like 28 characters or so,
but scrolls when that size is exceeded. That may explain the erroneous
documentation. Try setting a password to something straightforward for
testing like A1aaaaaaaaaaaaaaaaaa and verify if it's a length issue or
something else.

Brian

-----Original Message-----
From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]]
On Behalf Of dgonzalez.itpro (at) gmail (dot) com [email concealed]
Sent: Tuesday, May 19, 2009 11:32 AM
To: focus-ms (at) securityfocus (dot) com [email concealed]
Subject: AD Password complexity - passwords too long?

Hello list,

We have password complexities set on our domain; minimum password length
is 8 and all XP users and Windows 2003 servers.

I can set my password to 9-10 characters, but if I try to set it for 10+
characters, they get the error message that they do not meet the
complexity requirements.

I have searched Microsoft documentation, and find minimum length
requirements. I think I saw something about 28 characters, and even 127
characters.

Does anyone know if there is a max password length?

We would like to keep the minimum 8 characters, and the maximum varied at
the users discretion. Can this be done?

Thanks

[ reply ]
Re: AD Password complexity - passwords too long? May 19 2009 06:30PM
Anthony Petito (anthonypetito gmail com)
Re: AD Password complexity - passwords too long? May 19 2009 06:26PM
Anthony Petito (anthonypetito gmail com)
Re: AD Password complexity - passwords too long? May 19 2009 06:06PM
DG Gmail (dgonzalez itpro gmail com) (2 replies)
RE: AD Password complexity - passwords too long? May 22 2009 09:05PM
Quark IT - Hilton Travis (Hilton QuarkIT com au)
RE: AD Password complexity - passwords too long? May 20 2009 04:09PM
Lee Clemens (security leeclemens net)
RE: AD Password complexity - passwords too long? May 19 2009 05:19PM
Lucas, Mark J (mjlucas caltech edu)
RE: AD Password complexity - passwords too long? May 19 2009 05:17PM
Dave Doeppel (doeppel idealab com)


 

Privacy Statement
Copyright 2010, SecurityFocus