This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Could not create account in Active Directory complaining on password policy

Hi Experts 

I am getting a password policy violation error while adding ADSAccount to the target.

Please find the error below - 

ErrorMessages () [1777018] Error executing synchronization project (Active Directory Domain )'s workflow (Provisioning).
[1777124] Error executing projection step (user) of projection configuration (Provisioning (Provisioning)).
[1777219] Error executing synchronization step (user)!
[1777004] Method (Insert object (Insert)) could not be executed successfully.

Error executing user_password_Set on object  (Error: [System.Reflection.TargetInvocationException] Exception has been thrown by the target of an invocation.
[2226225] Password change for User test could not completed. The password does not meet policy requirements.
[System.Reflection.TargetInvocationException] Exception has been thrown by the target of an invocation.
[System.Runtime.InteropServices.COMException] The password does not meet the password policy requirements. Check the minimum password length, password complexity and password history requirements. (Exception from HRESULT: 0x800708C5)).
Password change for User test could not completed. The password does not meet policy requirements.
Exception has been thrown by the target of an invocation.


Error  writing object was tolerated because the object is a system object and cannot be changed.
The server is unwilling to process the request.

I am using the one identity manager password policy for the default. Password manager is also set up in the environment so password manager also have its own password policy.

The password I have set in the centralPassword of the person that comply with all the password policy. Still not sure what is missing. 

how can I debug the sync project on the password field to see exactly which password policy is violating? 

Thanks in advance

Parents Reply Children
  • Thanks Markus for your quick reply. I thought the same way you are. The very first test I did was I created a test user in Active directory with a valid password then I use the same password in Identity Manager. Does not work for me :(. My problem is I could not see what password policy is violating. Any light?

  • You cannot see what policy is violating because the error coming from the AD API we are using does not provide that. You need to check your password policies in AD or the ones in Password Manager if you do have a Password Policy Manager (PPM) component in use.