Re: Passwords expiring with no notification

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 08/22/04

  • Next message: Dan Dierking: "I am getting the following error when I'm trying to map to a shared folder locat" 
    Date: Sun, 22 Aug 2004 00:48:07 GMT

    That is interesting, particularly the part about when they logon to TS or RD that
    they are then prompted. I have read about other users having the same issue but it
    certainly seems no to be widespread and don't recall seeing a resolution. I guess it
    would be chalked up to being a glitch. Below is a KB referencing a similar problem
    but it is kind of dated. --- Steve

    http://support.microsoft.com/default.aspx?scid=kb;en-us;Q313194

    "Bruce Sanderson" <bsanders@junk.junk> wrote in message
    news:uLdh$X7hEHA.1392@TK2MSFTNGP11.phx.gbl...
    > I've noticed on some Windows XP workstations (RTM and SP1 - not sure about SP2
    > yet), that the password about to expire warning does not appear when the user logs
    > on. This has been an annoyance for quite a while that I have not got to the bottom
    > of.
    >
    > I've checked the "Interactive logon: Prompt user to change password before
    > expiration" using RSOP, GPMC and gpedit.msc and all these tools tell me that this
    > setting is 14 days.
    >
    > This seems to happen on XP computers that are left powered on (but logged off) when
    > not in use (e.g. nights and weekends) and where only one (domain) user account is
    > normally used to logon.
    >
    > I investigated (complained) about this shortly after XP went RTM, but never got any
    > explanation or solution. Since our users don't deem this a very important problem,
    > I've not pursued it.
    >
    > What I've noticed is that if the same user account is used to logon to a Terminal
    > Services session (or RDP to another computer), they do get the "password about to
    > expire" message, although they didn't get it when logging on their XP workstation.
    > If the user does not change the password, logs of the TS or RDP session, logs of at
    > their workstation, then logs on at the workstation again, they still don't get the
    > warning (even if the workstation is restarted).
    >
    > Quite mysterious!
    > --
    > Bruce Sanderson MVP
    >
    > It is perfectly useless to know the right answer to the wrong question.
    >
    >
    > "Steven Umbach" <n9rou@n0spam-comcast.net> wrote in message
    > news:QhAVc.11272$9d6.1864@attbi_s54...
    >> Check the Local Security Policy [secpol.msc ] on those computer for the security
    >> option under security settings/local policies/security options for prompt user
    >> to change password before expiration which by default should be 14 days. You can
    >> configure it in Domain Security Policy also if you want. I don't know of a way
    >> to have all users passwords expiring at the same time unless you try to
    >> configure everyone to change their password at next logon and configure the
    >> password minimum age to be a day less than the maximum age which could get you
    >> close but I don't recommend it. A user should be able to change their password
    >> whenever they want after maybe a short maximum password age. What if they felt
    >> that someone somehow obtained their password. Would you want them to have to
    >> wait 56 days or until you manually reset it?? --- Steve
    >>
    >>
    >> "Ron@computer-pros.net" <anonymous@discussions.microsoft.com> wrote in message
    >> news:9f1a01c486cc$c9db4f60$a401280a@phx.gbl...
    >>> Having problems with some workstations having their
    >>> password expire with no warning on a 2000 Domain. Can I
    >>> have policy that would give 3 Login warnings?
    >>>
    >>> I also would like to have all workstations synced up to
    >>> have its password expiring at a particular date.
    >>>
    >>> Any help in the syntax would be appreciated
    >>
    >>
    >
    >

  • Next message: Dan Dierking: "I am getting the following error when I'm trying to map to a shared folder locat"

    Relevant Pages

    • Re: Authentication failures
      ... If yes I would be leaning torwards a corrupt profile. ... lastly the user never logs in on any other workstation so simultaneous ... The user logs in every day. ... Logon Failure: ...
      (microsoft.public.windows.server.sbs)
    • Re: event id 675
      ... workstation and uses a valid domain account name but enters a bad ... Failure Code 24.By reviewing each of your DC Security logs ... providing the username and domain name, ... address of the system from which the logon attempt originated. ...
      (microsoft.public.win2000.security)
    • Re: Daily Server Report (Critical Errors, Event ID: 537)
      ... Also, Logon type of 3 is a network logon, this is considered a ... Does this issue happen on client workstation or server? ... Does your server and all clients' workstation work well now? ... issue in your Network? ...
      (microsoft.public.windows.server.sbs)
    • Re: Daily Server Report (Critical Errors, Event ID: 537)
      ... Also, Logon type of 3 is a network logon, this is considered a ... Does this issue happen on client workstation or server? ... Does your server and all clients' workstation work well now? ... issue in your Network? ...
      (microsoft.public.windows.server.sbs)
    • Re: Users cannot access remote web workplace without admin access
      ... RWW site logon issue ... When we create the user accounts by using the SBS add users ... workstation through the RWW-RDP connection? ... For the RDP access issue, it could be an expected behavior. ...
      (microsoft.public.windows.server.sbs)