We have currently upgraded to SQL 2005 and implemented complex passwords.
Our policy includes a minimum Password Age set to 1.
The problem we are having is when we create a new user or reset a password from someone who was locked out, they are not able to create a new password, unless I remove the complex password options.
They get the error message "The password change failed for an unknown reason. Enter a different password or contact your system administrator."
It seems if I do not check the box for them to immediately change their password, they are able to get in using the password I change it to. But, I want them to change the password immediately.
I found an article 922456 in the Knowlege base that talks about receiving this error if the Minimum Password Age in the group policy is set to 0 and it says that it needs to be set to greater than 0 for a user to be able to change it at anytime.... which doesn't make sense to me... seems if I had a number in there >0 it would not let me change it until that age had passed. Which is why I think that may be our problem.... maybe we really DO need to set it to 0. I was hoping that someone could tell me how their group policy is set and the steps they use to create a new user in GP.
Thank you.
*This post is locked for comments