dev.rean.me
windows-server

04 - Windows Server 2012 Remove Default Strong Password (Video in Khmer)

Learn how to disable default strong password policy on Windows Server 2012 R2 step-by-step with video tutorial in Khmer and tips for beginners.

2026-09-09 ยท 3 min read

Share:

Hello my friend! Today I show you step-by-step how to Remove Default Strong Password Policy on Windows Server 2012 R2! After promote server to Domain Controller, Windows default settings force user to create complex password with uppercase letters, numbers, and symbols. For lab testing environment, changing to simple password make learning very fast and easy! Follow steps below with video tutorial in Khmer! Let's get started!

โš ๏ธ Warning: Only disable password complexity in LAB TESTING ENVIRONMENT! For real company production server, always keep strong password policy enabled for security! In video tutorial I use simple password 1234 for demo only!

Step 1: Open Group Policy Management Console (GPMC)

  1. Open Server Manager > click Tools menu at top right > select Group Policy Management (or press Win + R > type gpmc.msc > press Enter).
  2. Expand Forest: yourdomain.local > expand Domains > expand your domain name (example: mydomain.local).
  3. Right-click on Default Domain Policy > select Edit....

๐Ÿ’ก Tip: Domain password policy MUST be configured inside Default Domain Policy GPMC! Editing Local Security Policy (secpol.msc) will NOT affect domain user accounts!

Step 2: Disable Password Complexity & Set Simple Length

Inside Group Policy Management Editor window:

  1. Navigate to: Computer Configuration > Policies > Windows Settings > Security Settings > Account Policies > Password Policy
  2. Disable Complexity: Double-click Password must meet complexity requirements > select Disabled > click OK.
  3. Set Minimum Password Length: Double-click Minimum password length > change value to 0 or 1 > click OK.
  4. Set Password Never Expire (Optional): Double-click Maximum password age > set to 0 days > click OK.

Step 3: Force Update Group Policy (gpupdate /force)

After changing settings, apply policy to domain controller immediately:

  1. Open Command Prompt (cmd) as Administrator.
  2. Type command gpupdate /force and press Enter.
  3. Wait until message show "Computer Policy update has completed successfully". Now you can set simple password (like 1234) for domain accounts!

๐Ÿ’ก Tip: Always run gpupdate /force in command prompt after changing Group Policy! If you do not run this command, Windows can take up to 90 minutes to automatically refresh policy!

Watch Video Tutorial (Khmer)

Watch full step-by-step video tutorial below to see complete process in Khmer:

Hope this tutorial help you disable default strong password policy on Windows Server 2012 R2 easily for lab testing! Practice setup your domain policy today. Happy learning my friends! Sharing is caring!