Re: Password GPO

Tech-Archive recommends: Fix windows errors by optimizing your registry

Howdy Brett!

Brett S. wrote:
I am going to enforce account/password policy to all domain users:

Account Policies/Password Policy
Enforce password history 5 passwords remembered
Maximum password age 120 days
Minimum password age 14 days
Minimum password length 8 characters
Enforce password complexity Enabled

When will a user be notified to change a password the first time? Is a user

Per default 14 days before the password expires, if I remember right.

notified prior to actual password expiration - does a prompt ask the user to change the password now and that they have a certain number of days before the password expires? How do I set that parm?

Yes, the user gets notified that the password will expire in X days and
gets questioned, whether he wants to change the password now or later.
If the password is expired, the user is forced to change it on logon.

Do I have to set all users accounts to change password at next logon manually through ADUC to force the first change immediatly?

Yes. If you do not force to "re-new" their passwords the new password
policy will not take place.

--
Nachwuschsadmin aus dem Süddeutschen/Germany.
eMail: Vorname [bei] frickelsoft [Punkt] net.
.