Re: Password policy question

Hi!

As far as I know:

1. It take effect immediately. If you set the maximum password age to 60
days and you have users that have not changed there password for 60 days or
more, they will be prompted to so. Users thar have changed password the last
60 days or less does not have to change their passwords. If you have set
that the users to be warned, lets say 14 days before the password expire and
the password is older than 60 days that warning will not show up of course.
Some users like to think a couple of days what their next password will be.
You may also get some troble with mapped drives. Users who only lock their
computer doesn't get the change prompt, and when the network drives connect
the password is not correct and they cannot access the resource.

2. Yes

3. Yes

4. Yes, but no. It's not built in.

"MikeZ" <mziakasnospm@xxxxxxxxxxx> skrev i meddelandet
news:04pfk11kg0icv3j6outp022imh1qrbpt1a@xxxxxxxxxx
>
>
>
> Hi,
>
> We currently have a Windows 2003 and Novell 5 infrastructure. We are
> in the process of migrating away from Novell which is used to force
> password changes. I have some questions I hope you all can help with.
>
> 1. When I set a password policy on my Win2003 domain will it take
> effect immediately? Meaning will users be asked to change their
> password right away if for example I set it to change passwords every
> 60 days and the user accounts have never had to change before?
>
> 2. In Novell I can set it so the users get X amount of grace logins
> before they get locked out. Is there a way to do this in Windows?
>
> 3. If I check "Password never expires" under the user account
> settings, will this override the domain password policy?
>
> 4. Is there a way for a certain groups of users to have different
> settings than the domain policy For example the default is change
> every 60 days but for some every 30 days?
>
>
> Thanks!!!


.

Relevant Pages

  • Re: Password policy question
    ... If you have decided it is smart to have a password policy, it should apply to everyone, including those important special accounts. ... in the process of migrating away from Novell which is used to force password changes. ... settings than the domain policy For example the default is change ...
    (microsoft.public.windows.server.active_directory)
  • Password policy question
    ... We currently have a Windows 2003 and Novell 5 infrastructure. ... When I set a password policy on my Win2003 domain will it take ... settings than the domain policy For example the default is change ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password policy question
    ... It will only override domain's password policy related to the maximum ... Other settings, such as password length and complexity ... By default, there may be only one password policy in a domain, and it is ... > We currently have a Windows 2003 and Novell 5 infrastructure. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Simple question on Password Policy
    ... The password policy is enforced by whatever computer owns the user account. ... Default Domain policy so that it is enforced by all domain member computers ... For domain user accounts, it is the domain ... those computers enforce whatever password policy applies to ...
    (microsoft.public.win2000.group_policy)
  • Re: Password policy
    ... you password expires" on client desktops connected to a AD domain. ... occured if an end-user logged into a Windows 2003 Exchange OWA server. ... Domain Controller Security Settings" and "Default Domain Security Settings" ... > the password policy, and link it to domain controllers. ...
    (microsoft.public.win2000.security)
Quantcast