Re: PwdLastSet

I didn't know that. I thought that a forced expiration was required.

--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
http://www.pbbergs.com/

This posting is provided "AS IS" with no warranties, and confers no rights.


"Joe Richards [MVP]" <humorexpress@xxxxxxxxxxx> wrote in message
news:e5dSTJHQGHA.2992@xxxxxxxxxxxxxxxxxxxxxxx
This is true for complexity and length rules. Lockout policy and
expiration policy apply immediately. So if I have a password of age 200
days and someone slaps a expiration policy of 90 days into place, my
account is immediately expired and I will know it the next time I log in
or the system attempts to authenticate on my behalf (which happens
throughout the day in Windows).


joe

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm



Paul Bergson wrote:
This is news to me. I have been told passwords aren't impacted until
they are changed.



.

Relevant Pages

  • Re: Getting User Expiration date with dsquery
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... I like to get de expiration date of user accounts with the dsquery method using the accountexpires attribute. ...
    (microsoft.public.windows.server.active_directory)
  • Re: How can I report a bug to Microsoft Windows 2000 Team?
    ... Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.win2000.active_directory)
  • Re: Applied security groups
    ... but the core design is such that everything is a collection of loosely connection parts to help allow for decent scaling. ... Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: Overlap subnets in AD sites and Services
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... to simplify AD Sites and Services configuration, ...
    (microsoft.public.windows.server.active_directory)
  • Re: lastLogonTimestamp
    ... Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.windows.server.active_directory)