Re: Passwords Expire Too Fast

I found the source of the problem. It was a policy applied in my other
domain. I was too focused on the one domain. Thanks for all the help guys!
PS. Ben thanks a ton for opening my eyes to the Group Policy Results Wizard,
its an awsome troubleshooting tool!

"gav" wrote:

Thanks Ben,

I see what is going on now. These users never actually logon to the
computers using these domain accounts. They are only being used for OWA
email, so the computer policy objects are not being applied and thus their
passwords are not expiring at the desired intervals.

How I can apply the password policy to a user that does not logon to a
computer on the domain?

"Ben Winzenz [Exchange MVP]" wrote:

I'd suggest to download the Group Policy Management Console, and then run
the Group Policy Results wizard for one of your users that is experiencing
this. This will run through all the group policies and show you the
resultant set of policies that are being applied.

Bottom line is that password expiration is controlled by AD, not
Exchange/OWA, so if passwords are expiring every 40 days, it must be defined
in a Group policy somewhere.

--
Ben Winzenz
Exchange MVP
MessageOne
Read my blog!
http://winzenz.blogspot.com
http://feeds.feedburner.com/winzenz (RSS Feed)


"gav" <gav@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B3B41184-07E0-447B-8061-1ABFF95B2CA8@xxxxxxxxxxxxxxxx
Hi Omar,

My default domain policy does not have those settings set. I have applied
the password policies to the relevant Organisational Units.

"Omar El-Sherif" wrote:

make sure that you have edited the Default Domain Security Policy and it
is
attached at the domain level.

--
My Regards,
Omar El-Sherif
"gav" <gav@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0FA78F92-4D99-4C2D-B8E9-89F95FA26A6F@xxxxxxxxxxxxxxxx
I have Exhange Server 2003 setup with most of my email clients accessing
their mail via OWA. They dont logon to the domain with these accounts.
It
seems that their passwords are expiring way quicker than the time I
have
set
in the group policy object "MyDomain-> Computer Configuration ->
Windows
Settings -> Account Policies/Password Policy -> Maximum Password Age =
365";
The passwords seem to expire roughly every 40 Days.

How can I rectify this?






.

Relevant Pages

  • Re: Registry tatooing
    ... It can list and clean true policies, ... Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at http://www.sdmsoftware.com/products.php ... Well, to his disliking, the settings remained. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group Policy question
    ... Policies" and Local Security Policy that is a subset of local Group Policy. ... the registry directly unless given direct and cohesive instructions ...
    (microsoft.public.windowsxp.security_admin)
  • RE: security policy not specified option
    ... Resultant Set of Policy does not in any way change the processing of Group ... processing different parts of group policy. ... Machine parses local policy and applies any settings contained in the ... parses computer configuration settings in those policies. ...
    (Focus-Microsoft)
  • Re: Multiple settings configured in one ou group policy
    ... The more policies that you have the more ... create a policy for every setting, as the more policies processed can have ... If you have policy settings that are going to change on a regular basis ... the group policy guide. ...
    (microsoft.public.windows.group_policy)
  • Re: Reset GP back to "out of box" ??
    ... for more info on the differences between policies and preferences) will get removed automatically if you unlink, deny permission to or disable the GPOs being applied to a given user or computer. ... However, security policy cannot be undone simply be removing the GPO that set it, as you've discovered. ... you should remove the settings in the domain GPOs that are causing the problems in the first place. ... Group Policy Management solutions at http://www.sdmsoftware.com ...
    (microsoft.public.windows.group_policy)
Quantcast