Re: Password Change



"Conley" <Conley@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:4E9260E1-6CEA-485D-AAAD-9F509B3151FD@xxxxxxxxxxxxxxxx
Under Gpedit.msc Computer Config.- Windows Settings-Security Settings-
Account Settings- Password Policy- We have the Maximum Password age set to
60 days. A user today reported today at 1:00 Pm her email was wanting a
username and password. She also couldn't get onto the internet. I got her
to log out and when she tried to log back in it said her password had
expired. After she put in her new password, every thing worked fine. My
question is, did the 60 day password age expire in the middle of the day? I
thought it would expire on log in only. Thanks

Passwords can expire in the middle of the day. The security token generated at logon has a certain "life expectancy" during the session which may be defined under the Kerberos Policy of the domain policy. Additionally, some network resources like Exchange and ISA will periodically challenge the logged-in credentials.


--
Todd J Heron, MVP Windows Server - Networking
MCSE - Windows Server 2003/2000/NT; CCA


.



Relevant Pages

  • Re: Requiring domain password change
    ... if the user is logged on while the Maximum Password Age is changed ... And if I don't want the passwords to expire again after I change the ... support all at once. ...
    (microsoft.public.windows.server.active_directory)
  • AD 2003 password expiration/complexity question
    ... if my domain policy says maximum password age is zero days (passwords never ... expire) and i change it to an arbitrary number, say 10, and all accounts are ...
    (microsoft.public.windows.server.active_directory)
  • Requiring domain password change
    ... I want to require all domain users (except users accounts with passwords that ... it's the "Maxium Password Age" setting that I need to change. ... Would I need to change the "maximum password age" to ... And if I don't want the passwords to expire again after I change the value ...
    (microsoft.public.windows.server.active_directory)
  • Re: Requiring domain password change
    ... I need to set it from the Default Domain Policy but I'm not 100% sure that ... it's the "Maxium Password Age" setting that I need to change. ... Would I need to change the "maximum password age" ... And if I don't want the passwords to expire again after I change the ...
    (microsoft.public.windows.server.active_directory)