I've dug through threads where this question has been asked before but found no answers to this question.
We have a Windows 2016 domain running with an extensive set of group policies.
The domain controllers are running Windows Server 2016 Version 1607 (OS Build 14393.4651) and are updated to the latest patch levels.
When I attempt to edit a GPO for restricted accounts as required by corporate measure plans, the minimum password length is limited to 14 characters. The measure plan requires 15 or more.
Powershell shows the following
PS C:\Users\adminXXXXX> Get-ADObject (Get-ADRootDSE).schemaNamingContext -Property objectVersion
DistinguishedName : CN=Schema,CN=Configuration,DC=aaaaa,DC=bbbbb,DC=ccc
Name : Schema
ObjectClass : dMD
ObjectGUID : e450e53f-24cc-47c0-956f-d1d1f53d381d
objectVersion : 87
I updated the schema to Server 2019
I mounted a Server 2019 ISO and executed F:\support\adprep>adprep /forestprep
which reported
Current Schema Version is 87
Upgrading schema to version 88
Verifying file signature
Connecting to "DC01.xxxx.net"
Logging in as current user using SSPI
Importing directory from file "F:\support\adprep\sch88.ldf"
Loading entries........
7 entries modified successfully.
The command has completed successfully
Connecting to "DC01.xxxx.net"
Logging in as current user using SSPI
Importing directory from file "F:\support\adprep\PAS.ldf"
Loading entries....................
26 entries modified successfully.
The command has completed successfully
Adprep successfully updated the forest-wide information.
I then executed adprep /domainprep
Which reported
Adprep successfully updated the domain-wide information.
PS C:\Users\adminbakejx> Get-ADObject (Get-ADRootDSE).schemaNamingContext -Property objectVersion
DistinguishedName : CN=Schema,CN=Configuration,DC=jocy,DC=siemens,DC=net
Name : Schema
ObjectClass : dMD
ObjectGUID : e450e53f-24cc-47c0-956f-d1d1f53d381d
objectVersion : 88
I am at a loss as to how to get the GPO set to more than 14 characters.
