Article ID: 10009, created on Mar 2, 2011, last review on May 9, 2014

  • Applies to:
  • Virtuozzo containers for Windows

Symptoms

After a container's creation on the node with Windows 2008 R2 and Parallels Virtuozzo Containers 4.6, the operation for the password setting (not as strong as is required by the password policy) fails with the following error:

Can't modify Container parameters :
ERROR:Cannot set password in CT 1294 for user Administrator
ERROR:The password does not meet the password policy requirements. Check the minimum password length, password complexity and password history requirements.

Cause

The issue occurs due to native Windows Server 2008 R2 password policy requirements.

Workaround

Our development team is working on including a permanent fix for this issue into future builds.

To create a new Windows 2008 R2/SP2 container without a strong password policy requirement, edit the <VZ_VOLUME>:\vz\scripts\vz-poststart.cmd file on your PVC Hardware Node (where <VZ_VOLUME> is the partition where the vz folder is located.)

NOTE: Please be warned that this operation will break future updates of the vz-poststart.cmd file.

Insert the below code at the end of the script, right after the label ":is_w2k8":

:is_w2k8

REM
REM windows 2008r2 password policy fix
REM

for /F "tokens=1 usebackq delims=" %%i in (`vzcfgt getctossysroot %VPSID%`) do set VPSWINPATH=%%i
if A%VPSWINPATH%A == AA set VPSWINPATH=C:\Windows
set VPSWINDRV=%VPSWINPATH:~0,1%
set VPSWINDIR=%VPSWINPATH:~3%
for /F "tokens=1 usebackq delims=" %%i in (`vzcfgt getctroot %VPSID% %VPSWINDRV%`) do set VPSROOT=%%i
if A%VPSROOT%A == AA set VPSROOT=d:\vz\root\%VPSID%\%VPSWINDRV%
set VPSWIN=%VPSROOT%\%VPSWINDIR%

if exist "%VPSWIN%\explorer.exe" (
if not exist "%VPSWIN%\rmpasspol.cfg" (
vzctl exec2 --skiplock %VPSID% secedit /export /cfg "%VPSWINPATH%\rmpasspol.tmp" >NUL
type "%VPSWIN%\rmpasspol.tmp" | sed.exe -e "s/PasswordComplexity = 1/PasswordComplexity = 0/" > "%VPSWIN%\rmpasspol.cfg"
del /q "%VPSWIN%\rmpasspol.tmp"
vzctl exec2 --skiplock %VPSID% secedit /configure /db "%VPSWINPATH%\security\rmpasspol.sdb" /cfg "%VPSWINPATH%\rmpasspol.cfg" /areas SECURITYPOLICY >NUL
)
)




965b49118115a610e93635d21c5694a8 d02f9caf3e11b191a38179103495106f 2897d76d56d2010f4e3a28f864d69223

Email subscription for changes to this article
Save as PDF