Re: Re: Turn off "prompt user to change password"


The operating system imposes a default PasswordExpiryWarning Value in the registry.
See tip 0141 » Alter when Windows NT displays the Password expiration warining.
in the 'Tips & Tricks' at http://www.jsifaq.com

On Fri, 16 Jun 2006 08:23:02 -0700, RTR_John <RTRJohn@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

Jerold,
Thanks for the quick reply....I appreciate it. I guess what I'm trying to
get at is how to completely prevent users from getting this prompt rather
than how to change the number of days prior to expiration that they receive
the message. Since the setting is already "not defined" by default I'm a
little perplexed as to how to accomplish this.

For example, the default password age setting is defined and shows 42 days
in the default domain policy. This is different from the "prompt users to
change their password" setting which is not defined by default but still
prompts users 14 days prior to expiration.





"Jerold Schulman" wrote:

On Fri, 16 Jun 2006 06:57:02 -0700, RTR_John <RTRJohn@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

Hey Everyone,

I'm wanting to turn off the setting that prompts users to change their
password (every 14 days by default). I know this is a domain-wide policy and
I found the specific setting within group policy but it is not defined in
2k/2k3. My guess is to define the policy and change the number of days to 0,
but I'm not sure about this.

We are implementing biometic devices across the organization which randomly
generates passwords when they expire so we don't want to prompt our users to
change them.

If anyone has any experience turning off this reminder domain-wide, your
help would be greatly appreciated.


See tip 9205 » How can I use Group Policy to change the 14 day password change notification?
and links in the 'Tips & Tricks' at http://www.jsifaq.com

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com


Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com
.

Relevant Pages

  • Re: If a computer is not used for more than 3 months auto disable
    ... If it's the doamin policy would I be looking at Security settings> Account policy> Password policy? ... Brian Desmond ... Windows Server MVP - Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain password expiration reset
    ... Basically setting the policy sets an attribute on the domain NC Head object ... chop it down by a few more days and slowly expire everyone and get them reset. ... >>So if you have someone with a password age of 80 days and you set a policy of 90 ... how do you reset the password expiration ...
    (microsoft.public.windows.server.active_directory)
  • Re: Advise to password policy
    ... The policy that governs password aging is applied all or none to all ... Another thing one can do is to use a staged expiration. ... I had a total 200 over user accounts with most of them over the 90 days ... Perhaps using the AD user account "password never expire" field or GPO ...
    (microsoft.public.security)
  • Re: Changes to Password Policy did not update?
    ... Did you created a new domain policy or edit the Default Domain Policy? ... you need to create or change a Password policy at the ... > Hi - we have a root and 2 child domains. ... The policy increased the expiration> date ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain Password Policy Question
    ... I beleive this depends on the group policy refresh interval which is by ... rules and extending the expiration to one year. ... We currently have the require complex passwords enabled along with the ... number of characters we be 15 characters without complexity. ...
    (microsoft.public.windows.server.active_directory)