How to change default Domain password policy

                       How to change the default Domain password policy.

1. Login as administrator in Domain Controller.
2. open group policy management console (open run and type gpmc.msc)
3. expand Domain >expand domain_name(preetam.com)>default domain policy
4. right-click on this and click on edit
5. Expand Computer Configuration >policy>windows setting>account policy>password policy 
6. right click on minimum password length and click on properties.
7. right click on a password must be a complexity requirement and click on the property and disable it. 

note:- if we change  policy then we want to update policy 

          we can update policy in three ways...

• open run and type gpupdate and click ok.

                                    or

• restart domain controller.

                                   or 

• wait 30min to 180min.

                              Account lockout policy --------GPM

1. In System 1 Domain controller server login as Administrator.
2. open the GPM.
3. expand Domain > domain name> default domain policy
4. right click and click edit

new window will be appear

1. expand computer configuration >policy>windows setting>sequrity setting>account policy>account lockout policy
2. right click and click on properties 
3. type three invalid login attempts and apply

validation 

In System 2 client computer tries to user1 to a user2 account lock

manually unlocking user account in dc login as an administrator  open ADUC console right click  on user1 account click properties the select account tab and check the box unlock the account and apply,

same login hours and  Login To