Password Reset Enforce History Policy

jshafton21
Kilo Guru

Has any one had issues with the Password Reset Enforce history policy on AD? I keep getting an error "A constraint violation occurred. (Exception from HRESULT: 0x8007202F)Stack Trace:".


I guess I have two questions:
For those of you that have Enforce history policy and aren't having any issues what level of access does your orchestration account have?

And for those of you that did have the issue how did you resolve it?

I have a work around in place, by un-checking the Enforce history policy box the password will be changed but it doesn't enforce the proper history.

Thanks!

1 ACCEPTED SOLUTION

jshafton21
Kilo Guru

Turns out we had a min password age of 1 instead of 0. Like it should be. Our security team didn't want to change this so I updated the workflow to force password change on next login which allowed the system to change the password and enforce the history policy.


View solution in original post

9 REPLIES 9

jshafton21
Kilo Guru

Turns out we had a min password age of 1 instead of 0. Like it should be. Our security team didn't want to change this so I updated the workflow to force password change on next login which allowed the system to change the password and enforce the history policy.


Hi Jared,


Would you mind expanding a little bit on exactly how you fixed it. I am having the exact same issue except the min age is 5 and like you security will no change it. Which workflow did you update and how exactly did you update it?



Thanks,


Mike


Hi Mike,



In order to bypass the security requirements I had to modify the base workflow and force the 1st step of setting a temporary password to also require the password to be changed on next login. That way when the password change step occurred the password could be changed regardless of the min password age requirement.



I'll double check tomorrow which workflow it was as I can't remember off the top of my head



Sent from my iPhone


Ok, thanks. look forward to checking this post tomorrow.