In the process of getting my new Windows Server 2008 Domain Controller VM setup, I needed to set the password for the new domain's Administrator account to match our lab standard password. This password doesn't meet the default complexity requirements that the Domain Policy establishes. So I had to use Group Policy Management (located in Administrative Tools) to edit the Default Domain Policy. In Computer Configuration > Security Settings > Account Policies > Password Policy, there are several settings that control what passwords are allowed for how long. I disabled the complexity requirements (must have a capital letter, lowercase letter, number, and not be based on a star trek character type of requirements).

I then saved the changes and verified that they had taken effect by viewing the domain policy. I was already logged on as the domain Administrator, so I pressed CTRL-ALT-DEL and selected Change a password.... I typed in the old password (that I had made suitably complex to be able to complete installation) and the new simple password. I received an error message "Unable to update the password. The value provided for the new password does not meet the length, complexity, or history requirements of the domain."

After checking again that the domain policy was in fact changed to allow simple (or non-complex) passwords, I did what any good Windows admin would do - I rebooted. Following reboot it still did not allow me to change passwords. I created a new account - Admin - that way a copy of the original Administrator account and was able to assign it the simple password without a problem. I then logged on as this new Admin user and used Active Directory Users and Computers to reset the Administrator account to the new simple password - with no problem.

So I wasn't able to change it from the CTRL-ALT-DEL (or windows security) Change a password... screen, but I was able to change it by resetting it from another account. I wasn't able to find any other hits via google on this problem and resolution, even after I had figured it out. I'm not sure what this is the way it works, but I did find a way around.

Todd