Re: Passwords Expire Too Fast



I'd suggest to download the Group Policy Management Console, and then run
the Group Policy Results wizard for one of your users that is experiencing
this. This will run through all the group policies and show you the
resultant set of policies that are being applied.

Bottom line is that password expiration is controlled by AD, not
Exchange/OWA, so if passwords are expiring every 40 days, it must be defined
in a Group policy somewhere.

--
Ben Winzenz
Exchange MVP
MessageOne
Read my blog!
http://winzenz.blogspot.com
http://feeds.feedburner.com/winzenz (RSS Feed)


"gav" <gav@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B3B41184-07E0-447B-8061-1ABFF95B2CA8@xxxxxxxxxxxxxxxx
Hi Omar,

My default domain policy does not have those settings set. I have applied
the password policies to the relevant Organisational Units.

"Omar El-Sherif" wrote:

make sure that you have edited the Default Domain Security Policy and it
is
attached at the domain level.

--
My Regards,
Omar El-Sherif
"gav" <gav@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0FA78F92-4D99-4C2D-B8E9-89F95FA26A6F@xxxxxxxxxxxxxxxx
I have Exhange Server 2003 setup with most of my email clients accessing
their mail via OWA. They dont logon to the domain with these accounts.
It
seems that their passwords are expiring way quicker than the time I
have
set
in the group policy object "MyDomain-> Computer Configuration ->
Windows
Settings -> Account Policies/Password Policy -> Maximum Password Age =
365";
The passwords seem to expire roughly every 40 Days.

How can I rectify this?





.



Relevant Pages

  • Re: Group Policy question...
    ... I added a group policy for passwords, ... Password Policies (and everthing in Security\Account Policies, i.e., ... policy is set to enforce a password change - minimum days is 1, ... but none of us have been warned of our passwords expiring or to change it. ...
    (microsoft.public.win2000.active_directory)
  • Re: Passwords in Server 2003
    ... Thanks for the reply on how to sort the passwords out. ... and domain.local policies wil display ... > select group policy object ... > in Group policy object editor ...
    (microsoft.public.windows.server.active_directory)
  • RE: Automatically locking workstations
    ... AD Group policy allows you to force a logout after x amount of time, ... you can enforce a screensaver, with passwords if you choose, or the ... Subject: Automatically locking workstations ... preset timed amount of inactivity? ...
    (Security-Basics)
  • Re: Setting local admin passwords
    ... A script used outside of group policy is your main ... We need to change these passwords regularly and I am hoping ... there is a group policy of some type that can help control these. ...
    (microsoft.public.windows.group_policy)
  • Re: GPOs dont work at all
    ... After removing the combinations with blank passwords - GP was applied ... run the Group Policy results wizard - this should at least let you see ... Check your group policy refresh interval for both server & clients - make ...
    (microsoft.public.windows.server.sbs)