Password Reset Portal Error: "The value for the new password does not meet the length, complexity, or history requirements of the domain"

[support]

Issue:

A user is trying to reset the own domain password using the Password Reset Portal, but is getting the following error message:

 

"The value for the new password does not meet the length, complexity, or history requirements of the domain"

 

Explanation of Password Reset Portal Reset mechanics:

The Password Reset Portal has its own password strength policies that the that the users must adhere to when setting a password.  Once these conditions have been met, the Portal UI will allow them to save the password and it will then attempt to reset it in Active Directory(AD).  If AD rejects that password for any reason, then we display the AD error message on the screen which is the Error message documented above.

 

Generally, users are putting in a string password, but cannot work out why they are still not allowed to reset their password.  We find that a lot of times, this is due to the domain Group Policies not allowing users to reset toer passwords twice in one day. If you look at this screenshot below of a password group policy, by default, this value set to “1”, which means a user’s password can only be reset once per day – Setting it to 0 means you can reset multiple times per day:

 

 

Fix:

Check all domain password policies for that user, and confirm they meet all the requirements, including the sneaky Minimum Password Age setting.  Either adjust the domain policy for the user, or wait until the next day to perform the reset.

 

Regards,

Support