04 - Windows Server 2012 Remove Default Strong Password (Video in Khmer)
Learn how to disable default strong password policy on Windows Server 2012 R2 step-by-step with video tutorial in Khmer and tips for beginners.
2026-09-09 ยท 3 min read
Hello my friend! Today I show you step-by-step how to Remove Default Strong Password Policy on Windows Server 2012 R2! After promote server to Domain Controller, Windows default settings force user to create complex password with uppercase letters, numbers, and symbols. For lab testing environment, changing to simple password make learning very fast and easy! Follow steps below with video tutorial in Khmer! Let's get started!
โ ๏ธ Warning: Only disable password complexity in LAB TESTING ENVIRONMENT! For real company production server, always keep strong password policy enabled for security! In video tutorial I use simple password
1234for demo only!
Step 1: Open Group Policy Management Console (GPMC)
- Open Server Manager > click Tools menu at top right > select Group Policy Management (or press
Win + R> typegpmc.msc> press Enter). - Expand Forest: yourdomain.local > expand Domains > expand your domain name (example:
mydomain.local). - Right-click on Default Domain Policy > select Edit....
๐ก Tip: Domain password policy MUST be configured inside Default Domain Policy GPMC! Editing Local Security Policy (
secpol.msc) will NOT affect domain user accounts!
Step 2: Disable Password Complexity & Set Simple Length
Inside Group Policy Management Editor window:
- Navigate to:
Computer Configuration>Policies>Windows Settings>Security Settings>Account Policies>Password Policy - Disable Complexity: Double-click Password must meet complexity requirements > select Disabled > click OK.
- Set Minimum Password Length: Double-click Minimum password length > change value to
0or1> click OK. - Set Password Never Expire (Optional): Double-click Maximum password age > set to
0days > click OK.
Step 3: Force Update Group Policy (gpupdate /force)
After changing settings, apply policy to domain controller immediately:
- Open Command Prompt (cmd) as Administrator.
- Type command
gpupdate /forceand press Enter. - Wait until message show "Computer Policy update has completed successfully". Now you can set simple password (like
1234) for domain accounts!
๐ก Tip: Always run
gpupdate /forcein command prompt after changing Group Policy! If you do not run this command, Windows can take up to 90 minutes to automatically refresh policy!
Watch Video Tutorial (Khmer)
Watch full step-by-step video tutorial below to see complete process in Khmer:
Related Tutorials
- ๐ Windows Server 2012 Complete Tutorial Series (Video in Khmer)
- ๐ฅ 01 - How to Download and Install Windows Server 2012 R2 (Video in Khmer)
- โ๏ธ 02 - Windows Server 2012 Basic Configuration (Video in Khmer)
- ๐ 03 - Windows Server 2012 Promote First Domain Controller (Video in Khmer)
- ๐ฅ 05 - Windows Server 2012 Create OU and User Account (Video in Khmer)
Hope this tutorial help you disable default strong password policy on Windows Server 2012 R2 easily for lab testing! Practice setup your domain policy today. Happy learning my friends! Sharing is caring!