Re: Domain password expiration reset

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 01/12/05 

Date: Wed, 12 Jan 2005 12:43:40 -0500

The expiration is based off the time the passwords were set, not off the time
the policy was set.

So if you have someone with a password age of 80 days and you set a policy of 90
days that very day, they have 10 days before they have to change their password.
In a similar circumstance if someone has a password age of 120 days, they will
expire immediately.

  joe 

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
onires wrote:
> My company is currently migrating to AD from NT so I'm relatively new to 
> Active Directory.  My question is, how do you reset the password expiration 
> time for the domain?  Right now we have disabled the expiration timeframe 
> within password policies and are planning to keep it that way for a few days 
> so that the end users will login to the domain and have their password 
> expiration reset to disable.  Then we will go back in and reset the 
> expiration back to the original 90 days.  We are hoping that this will reset 
> all users pwd expirations for a fresh 90 days.  It seems logical, but there 
> has to be an easier way.  We are making sure that it is being replicated 
> throughout the domain.  Any help would be greatly appreciated!  Thanks!

Relevant Pages

  • Re: Domain password expiration reset
    ... Basically setting the policy sets an attribute on the domain NC Head object ... chop it down by a few more days and slowly expire everyone and get them reset. ... >>So if you have someone with a password age of 80 days and you set a policy of 90 ... how do you reset the password expiration ...
    (microsoft.public.windows.server.active_directory)
  • Domain password expiration reset
    ... Active Directory. ... how do you reset the password expiration ... all users pwd expirations for a fresh 90 days. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain password expiration reset
    ... how do you reset the password expiration ... you look at the properties of the root domain object in Active Directory ... you'll find the group policy tab. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain password expiration reset
    ... So resetting the maximum password age to disable and then re-enabling it ... > Joe Richards Microsoft MVP Windows Server Directory Services ... how do you reset the password expiration ...
    (microsoft.public.windows.server.active_directory)
  • Re: Re: Turn off "prompt user to change password"
    ... Alter when Windows NT displays the Password expiration warining. ... in the default domain policy. ... I'm wanting to turn off the setting that prompts users to change their ... Windows Server MVP ...
    (microsoft.public.windows.group_policy)
Loading