I recently ran into an issue where I couldn't change the password of an account in AD from one of the Domain Controllers. I realised it's because it has a different Group Policy than other computers.
Run > gpmc.msc
Expand your forest, expand the Domains container, expand your domain, and then right click on the Domain Controllers container.
Pick "Create a GPO in this domain, and Link it here...".
Pick a name for your GPO (e.g. "Disable Password Complexity Rules") and click OK.
Expand the Domain Controllers container, right click on your new policy, and pick "Edit...".
Navigate through Computer Configuration > Policies > Windows Settings > Security Settings > Account Policies.
Open the policy named "Password must meet complexity requirements" and set it to Disabled.
The policy is now set, and all you need to do is run gpupdate.
Run > cmd
Type gpupdate, hit enter, and wait for it to complete. It'll only take a few seconds.
Once gpupdate has completed, you're all set.
I always welcome feedback on my posts, please contact me if you have any. I'm also happy to answer any related questions if I know the answer.
