Bypass password policy for local user account

Answered Bypass password policy for local user account

  • Monday, January 21, 2013 1:34 PM
     
     

    Hi guys.

    Is there any way of creating a local user on a domain computer, with a password that doesn't follow the domain password complexity group policy ?

    This is in a lab environment, but we don't want to change any GPO or AD structure.

    Can the user be made through registry for example?

    Thanks in advance.

All Replies

  • Wednesday, January 23, 2013 9:19 AM
     
     Answered
    Solution: sign the computer out of the domain, then disable the local password policy. create the user. Sign the computer in the domain again.
    • Marked As Answer by niklasrene Wednesday, January 23, 2013 9:19 AM
    •  
  • Thursday, January 24, 2013 4:05 AM
    Moderator
     
     
    Thanks for sharing your experience and solution.
  • Friday, February 01, 2013 10:15 AM
     
     

    Mind that in a lot of (semi) corporate, enterprise environments adding a computer to the domain is not as easy as described here. You need specific permissions to be able to do this, so I highly recommend to verify this before you start making any changes.

    I would recommend the method described here:

    http://social.technet.microsoft.com/Forums/en-US/winservercore/thread/0d1067a8-4897-428c-abea-72a9f4454f0

    (using secedit to export, edit and then again import policy settings). Works like a charm even though the policy is enforced in the domain.

    • Edited by davidvl Friday, February 01, 2013 10:28 AM added secedit solution
    •