Re: Maximum password age - Need Proof



On Feb 28, 5:59 pm, "Joe Richards [MVP]" <humorexpr...@xxxxxxxxxxx>
wrote:
As Richard indicated, you can only set this value to 0 or -1. You cannot
set it to any arbitrary value.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Editionwww.joeware.net

---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm



Andrei Ungureanu [MVP] wrote:
As Joe already said (twice), you can setpasswordpolicyonly on domain
level (for domain accounts), not OUs.
Anyway I'm taking this chance guys to ask if someone knows if you can change
the value of PasswordLastChanged so that yourpasswordwill expire quicker.
Any idea?- Hide quoted text -

- Show quoted text -

Why don't you just tell him to run net accounts off his machine at the
command prompt and that will give him the password requirements.
Mind you if you have another password filter in place this command
will not show you the settings within the other filter.

Hope this convinces him.

Good luck

Harj Singh
Password Policy done right
www.specopssoft.com

.



Relevant Pages

  • Re: Oh.... Im just wondering whos seen this stumper...
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... he was explicit write permissions. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Preventing Users from removing their PC from the Domain
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... Author of O'Reilly Active Directory Third Edition ... results, no disable if no creds, disable with creds. ...
    (microsoft.public.win2000.security)
  • Re: SID history
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... Author of O'Reilly Active Directory Third Edition ... I prefer adfind because it includes a -binenc switch that will display the SIDs in a much more readable format than you might get otherwise. ...
    (microsoft.public.windows.server.active_directory)
  • Re: converting SID
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... IIRC you can only write to sIDHistory when creating an object. ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to purge a mailbox programatically
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... My guess is that this WMI class is calling a routine in a private serverside library the hard part is finding documentation for all the steps that library performs when it does a purge. ...
    (microsoft.public.exchange.development)