0

Specifically, I've been looking through MSDN and Technet trying to find the default US English error message used by Windows for the following Account Policy Settings:

  1. Enforce Password history
  2. Maximum password age
  3. Minimum password age
  4. Minimum password length
  5. Password must meet complexity requirements

Does anyone have a reference as to what they are. I'm being slightly lazy and trying to avoid setting them, breaking them and noting down the error messages! My Google-foo has failed me today.

2
  • Will it matter if they change with W9? What if they were different (more/less/different terms) in an older version of Windows?
    – Dave
    Aug 26 '14 at 9:31
  • I wasn't really looking for a specific version of Windows. If someone only knows a specific version then I'm happy to hear it.
    – Rebecca
    Aug 26 '14 at 9:39
3

Password related strings

The following Microsoft article provides a list of common logon error messages, along with a brief explanation: Workstation Logon. It was written for Windows 2000, but it might still apply.

And here are some XP messages, courtesy of NirSoft: Windows XP DLL File Information - msgina.dll

Text dump

These should be all messages which contain the word password, straight from Windows 7 SP1:

// kernel32.dll.mui

86, "The specified network password is not correct."
615, "The password provided is too short to meet the policy of your user account.\nPlease choose a longer password."
616, "The policy of your user account does not allow you to change passwords too frequently.\nThis is done to prevent users from changing back to a familiar, but potentially discovered, password.\nIf you feel your password has been compromised then please contact your administrator immediately to have a new one assigned."
617, "You have attempted to change your password to one that you have used in the past.\nThe policy of your user account does not allow this. Please select a password that you have not previously used."
1057, "The account name is invalid or does not exist, or the password is invalid for the account name specified."
1216, "The format of the specified password is invalid."
1304, "The password is too complex to be converted to a LAN Manager password. The LAN Manager password returned is a NULL string."
1323, "Unable to update the password. The value provided as the current password is incorrect."
1324, "Unable to update the password. The value provided for the new password contains values that are not allowed in passwords."
1325, "Unable to update the password. The value provided for the new password does not meet the length, complexity, or history requirements of the domain."
1326, "Logon failure: unknown user name or bad password."
1327, "Logon failure: user account restriction. Possible reasons are blank passwords not allowed, logon hour restrictions, or a policy restriction has been enforced."
1330, "Logon failure: the specified account password has expired."
1386, "A cross-encrypted password is necessary to change a user password."
1390, "A cross-encrypted password is necessary to change this user password."
1397, "Mutual Authentication failed. The server's password is out of date at the domain controller."
1907, "The user's password must be changed before logging on the first time."
2108, "The network connection was made successfully, but the user had to be prompted for a password other than the one originally specified."
8529, "Security Account Manager needs to get the boot password."

-2147467238, "The server process could not be started because the configured identity is incorrect. Check the username and password."
-2146368492, "The identity or password set on the application is not valid"
-2144272340, "Group Policy settings require that a recovery password be specified before encrypting the drive."
-2144272334, "The recovery password file was not found because a relative path was specified. Recovery passwords must be saved to a fully qualified path. Environment variables configured on the computer can be used in the path."
-2144272332, "The recovery key provided is corrupt and cannot be used to access the drive. An alternative recovery method, such as recovery password, a data recovery agent, or a backup version of the recovery key must be used to recover access to the drive."
-2144272331, "The format of the recovery password provided is invalid. BitLocker recovery passwords are 48 digits. Verify that the recovery password is in the correct format and then try again."
-2144272329, "The Group Policy setting requiring FIPS compliance prevents a local recovery password from being generated or used by BitLocker Drive Encryption. When operating in FIPS-compliant mode, BitLocker recovery options can be either a recovery key stored on a USB drive or recovery through a data recovery agent."
-2144272328, "The Group Policy setting requiring FIPS compliance prevents the recovery password from being saved to Active Directory. When operating in FIPS-compliant mode, BitLocker recovery options can be either a recovery key stored on a USB drive or recovery through a data recovery agent. Check your Group Policy settings configuration."
-2144272324, "The BitLocker startup key or recovery password cannot be found on the USB device. Verify that you have the correct USB device, that the USB device is plugged into the computer on an active USB port, restart the computer, and then try again. If the problem persists, contact the computer manufacturer for BIOS upgrade instructions."
-2144272323, "The BitLocker startup key or recovery password file provided is corrupt or invalid. Verify that you have the correct startup key or recovery password file and try again."
-2144272322, "The BitLocker encryption key cannot be obtained from the startup key or recovery password. Verify that you have the correct startup key or recovery password and try again."
-2144272292, "Group Policy settings do not permit the creation of a recovery password."
-2144272291, "Group Policy settings require the creation of a recovery password."
-2144272278, "Group Policy settings do not permit the creation of a password."
-2144272277, "Group Policy settings require the creation of a password."
-2144272276, "The Group Policy setting requiring FIPS compliance prevents passwords from being generated or used. Please contact your system administrator for more information."
-2144272275, "A password cannot be added to the operating system drive."
-2144272256, "Your password does not meet minimum password length requirements. By default, passwords must be at least 8 characters in length. Check with your system administrator for the password length requirement in your organization."
-2144272255, "Your password does not meet the complexity requirements set by your system administrator. Try adding upper and lowercase characters, numbers, and symbols."
-2144272240, "BitLocker Drive Encryption cannot be applied to this drive because there are conflicting Group Policy settings for recovery options on operating system drives. Storing recovery information to Active Directory Domain Services cannot be required when the generation of recovery passwords is not permitted. Please have your system administrator resolve these policy conflicts before attempting to enable BitLocker."
-2144272239, "BitLocker Drive Encryption cannot be applied to this drive because there are conflicting Group Policy settings for recovery options on fixed data drives. Storing recovery information to Active Directory Domain Services cannot be required when the generation of recovery passwords is not permitted. Please have your system administrator resolve these policy conflicts before attempting to enable BitLocker."
-2144272238, "BitLocker Drive Encryption cannot be applied to this drive because there are conflicting Group Policy settings for recovery options on removable data drives. Storing recovery information to Active Directory Domain Services cannot be required when the generation of recovery passwords is not permitted. Please have your system administrator resolve these policy conflicts before attempting to enable BitLocker."

// winlogon.exe.mui

1004, "Changing password..."
1301, "Your password has been changed."
1302, "The system cannot change your password now because the domain %s is not available."
1303, "The User name or old password is incorrect.  Letters in passwords must be typed using the correct case."
1304, "You do not have permission to change your password."
1305, "The password on this account cannot be changed at this time."
1306, "Unable to change your password because the computer you selected is not the Domain Controller of the domain.  Type the name of the domain or the name of the Domain Controller and try again."
1307, "Please type a password which meets these requirements."
1308, "Your new password does not meet the minimum length or password history and complexity requirements.  Please type a different password."
1309, "Your password must be at least %hu characters; cannot repeat any of your previous %hu passwords; must be at least %ld days old; must contain capitals, numerals or punctuation; and cannot contain your account or full name."
1310, "Your password must be at least %hu characters, cannot repeat any of your previous %hu passwords and must be at least %ld days old."
1311, "Unable to change the password on this account due to the following error:\n\n%d : %s\n\nPlease consult your system administrator."
1312, "Unable to change your network provider password."
2010, "Consider changing your password"
2011, "Your password will expire in %ld days."
2012, "Your password expires today."
2027, "Your password will expire tomorrow."
2028, "\nTo change your password, press CTRL+ALT+DELETE and then click \"Change a password...\"."
2042, "Please lock this computer, then unlock it using your most recent password or smart card."
2046, "\nTo change your password, press CTRL+ALT+END and then click \"Change a password...\"."
4000, "Do you want to allow this application to read your stored user name and password?"

// authui.dll.mui

11401, "The passwords you entered did not match."
11402, "Please enter a user name and password."
11601, "The user name or password is incorrect."
11609, "The password on this account cannot be changed at this time."
11610, "The password for this account has expired. To change the password, click OK, click Switch User, and then log on."
11611, "Your password has expired and must be changed."
11613, "Your password has been changed."
14101, "To continue, type an administrator password, and then click Yes."

-1342172277, "The username/password credential provider failed to enumerate tiles."
-1342172275, "The autologon password could not be loaded."
-1342172274, "The autologon password could not be loaded.  Details: %1"

// kerberos.dll.mui

1073741828, "The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server %1. The target name used was %3. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is registered on, and only registered on, the account used by the server. This error can also happen when the target service is using a different password for the target service account than what the Kerberos Key Distribution Center (KDC) has for the target service account. Please ensure that the service on the server and the KDC are both updated to use the current password. If the server name is not fully qualified, and the target domain (%2) is different from the client domain (%4), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server."
-2147483634, "The password stored in Credential Manager is invalid. This might be caused by the user changing the password from this computer or a different computer. To resolve this error, open Credential Manager in Control Panel, and reenter the password for the credential %1."

Do it yourself

  1. Download ResHacker.

  2. Get the winlogon.exe.mui localization file, which is usually located in the following folder in an US English Windows system (Vista and later):

     C:\Windows\System32\en-US
    
  3. Open the file using ResHacker, and browse the String Table and/or Message Table section, whichever available. You can also press Ctrl+F to look for specific words.

  4. Repeat steps 2-3 as needed.

    Note Getting the right files might require some guesswork.

2
  • I guess 1308, "Your new password does not meet the minimum length or password history and complexity requirements. Please type a different password." is the string that covers my question.
    – Rebecca
    Aug 26 '14 at 11:49
  • @Junto Also 1309 and 1310. The only official reference I could find is the one I posted above.
    – and31415
    Aug 26 '14 at 12:58

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.