password age

From: Kevin Chapman (kevin_at_discussions.microsoft.com)
Date: 08/09/04

  • Next message: Kevin Chapman: "Password must meet complexity requirements" 
    Date: Mon, 9 Aug 2004 00:00:18 -0700

    Yes, it will. The best way to bring down the password age
    to 90 days from a higher value is to lower it in stages.
    Say if you are changing the policy from 180 days, change
    the policy to something like 150, then a week later
    change the policy to 120, etc. It is best to write a
    script to dump the password expiration dates on all of
    your accounts and graph it. This will help to know what
    to expect and manage the lowering of the password
    expiration. Depending on what your graphs show, you may
    want to decrease or increase the number of days (from 30
    in the example) you are changing for the expiration date.

    Kevin
    >-----Original Message-----
    >If I set a password age of 90 days, will that make
    everyone who's password is
    >older than 90 days change their password the day I push
    this policy ?
    >I messed around with this a year ago and some people
    called me saying that
    >it's asking them to change their password.
    >.
    >

  • Next message: Kevin Chapman: "Password must meet complexity requirements"

    Relevant Pages

    • Re: Domain password expiration reset
      ... Basically setting the policy sets an attribute on the domain NC Head object ... chop it down by a few more days and slowly expire everyone and get them reset. ... >>So if you have someone with a password age of 80 days and you set a policy of 90 ... how do you reset the password expiration ...
      (microsoft.public.windows.server.active_directory)
    • RE: password age
      ... "Kevin Chapman" wrote: ... > Say if you are changing the policy from 180 days, ... > script to dump the password expiration dates on all of ... > your accounts and graph it. ...
      (microsoft.public.windows.group_policy)
    • Re: Re: Turn off "prompt user to change password"
      ... Alter when Windows NT displays the Password expiration warining. ... in the default domain policy. ... I'm wanting to turn off the setting that prompts users to change their ... Windows Server MVP ...
      (microsoft.public.windows.group_policy)
    • RE: Bypassing Windows 2000 Domain Password settings
      ... My original issue was not just with minimum password age, ... There are 6 settings under Computer ... Controller policy was affecting my end result. ... If you tell it to block inheritance, ...
      (Focus-Microsoft)
    • Re: instituting ad password policy
      ... The basic thing I would recommend is take care of your users. ... I would wait a few days and then query AD for a password age report. ... policy then you should start enforcing it on your domain. ... You can use Richard's script to remove the "password never expires" flag ...
      (microsoft.public.windows.server.active_directory)