Re: Impact of changing group policy

I believe that the 45 day max password age will still affect them for their
current password. The password complexity and minimum password length
options won't affect them until the next time they change their password.
They won't be forced to immedately change their passwords.

N

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Any opinions or policies stated within are my own and do not necessarily
constitute those of my employer. Use of included script samples are subject
to the terms specified at http://www.microsoft.com/info/cpyright.htm


"sdipietro" <sdipietro@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:ED7CA5C9-551E-45BB-9545-0987873165F2@xxxxxxxxxxxxxxxx
>I currently have a group policy that is setup that the passwords have to be
>8
> characters (but no special characters), rotate every 45 days, and the last
> five passwords are remembered. I have one W2k and one Win2003 DC, and
> will
> be changing the policy to the following:
>
> 7 Character Minimum
> 90 day rotation
> Remember the last 3 passwords
> Need Capital letters, lower case, numbers, and alphanumeric characters
> Not contain any part of the username
>
> My question is this: If I have users who have just changed their
> passwords
> and I make a change to the current password GPO, will they be forced to
> change their passwords immediately or will they remain under the old
> password
> policy standards until the 45 day limit has run out?
>


.

Relevant Pages

  • Re: Password Complexity w/ Minimum password length
    ... For your 2 day example you are right, if the user decides to change it earlier, the new policy will also apply earlier. ... Minimum password length = 5 ... password complexity - ENABLED ...
    (microsoft.public.windows.server.active_directory)
  • RE: Minimum password length
    ... policy is enabled by default. ... This means that the minimum password length ... is 6 characters. ... For information on how to enforce a strong password, ...
    (microsoft.public.win2000.general)
  • Re: Cannot set user password
    ... See here about password policy requirements that have to be set on the domain level in OS earlier then 2008. ... Contain characters from THREE of the following four categories: ... I set all settings regarding to password complexity to undefined in: ... unable to open/edit several group policy objects. ...
    (microsoft.public.windows.server.active_directory)
  • RE: AD Password complexity - passwords too long?
    ... characters and I do not have a problem. ... AD Password complexity - passwords too long? ... We have password complexities set on our domain; minimum password ... complexity requirements. ...
    (Focus-Microsoft)
  • Re: Password Policy Reset to the old setting, Why?
    ... I'm not a group policy expert, but I think you want to do this in your ... default domain policy, don't you? ... > Minimum password length=5 characters ...
    (microsoft.public.win2000.active_directory)