Hi,

We have finally narrowed down our password reset issue to this field the Password Policy Enforcer. Whatever value we put in for the number of characters to include, users are unable to reset their passwords successfully unless they use a password with this value plus 1.

So if the number of numeric characters required is 1 then you need at least 2, if I set it to 2 then passwords will need 3 numeric characters, and so on, for a successful password change. The thing that made this so hard to work out is that all the password requirements listed in GINA on the ctrl+alt+del screen will have a tick to indicate that you're good to go - then when you hit enter you're met get the dreaded "This does not meet complexity rules...." error message (unless of course you happened to use more than 1 numeric character).

Any ideas on how to fix this? Only it really doesn't take much to throw my users so it would be great if the onscreen advise matched with the setting in password enforcer.

Many thanks in advance,

James