Re: Domain Password Policy Question

I beleive this depends on the group policy refresh interval which is by
default 90 mins
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/gp/33.mspx?mfr=true

Regards
Venkat

"Rich Wethington" <RichWethington@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:CB0FFF61-C8A2-491E-BDA3-9418A57EA38D@xxxxxxxxxxxxxxxx
Our current expiration is 6 months. Corproate is changing the complexity
rules and extending the expiration to one year. Will my users be prompted
immediately when I change the policy? Or will they have until the next
expiration? This is important because we have so many users that
frequently
travel. I do NOT want them to have to change immediately.

Thanks, Rich

"Jorge Silva" wrote:

Hi
If you didn't change the password expiration time, only the next change
the
users will be prompted to new requirements.
--
*************************************************
I hope that the information above helps you
Good Luck

Jorge Silva

MCSA + Exchange + MSCE
*************************************************

"KC" <KC@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B987FC7B-B3F9-4760-9C9D-DAB5DD176434@xxxxxxxxxxxxxxxx
I am about to change the default domain policy, and more specifically
the
password policy for my domain. (AD '03)

We currently have the require complex passwords enabled along with the
rest
of the necessary password related policies configured.

We are moving away from complex passwords to a passphrase where the
minimum
number of characters we be 15 characters without complexity.

My question is that if I make this change today, will this new policy
require all users to change their passwords, or will this requirement
be
necessary only at the next password change? People have a tendancy to
be
very
sensitive to password changes and I want to make sure that I inform the
users
as to exactly what is required when I implement this change.

If there is any advice that you may have on this, or similar changes, I
welcome them.

Thank you.




.

Relevant Pages

  • Re: Re: Turn off "prompt user to change password"
    ... Alter when Windows NT displays the Password expiration warining. ... in the default domain policy. ... I'm wanting to turn off the setting that prompts users to change their ... Windows Server MVP ...
    (microsoft.public.windows.group_policy)
  • Re: Domain password expiration reset
    ... Basically setting the policy sets an attribute on the domain NC Head object ... chop it down by a few more days and slowly expire everyone and get them reset. ... >>So if you have someone with a password age of 80 days and you set a policy of 90 ... how do you reset the password expiration ...
    (microsoft.public.windows.server.active_directory)
  • Re: Changes to Password Policy did not update?
    ... Did you created a new domain policy or edit the Default Domain Policy? ... you need to create or change a Password policy at the ... > Hi - we have a root and 2 child domains. ... The policy increased the expiration> date ...
    (microsoft.public.windows.server.active_directory)
  • Re: Advise to password policy
    ... The policy that governs password aging is applied all or none to all ... Another thing one can do is to use a staged expiration. ... I had a total 200 over user accounts with most of them over the 90 days ... Perhaps using the AD user account "password never expire" field or GPO ...
    (microsoft.public.security)
  • Re: Domain Password Policy Question
    ... Our current expiration is 6 months. ... password policy for my domain. ... number of characters we be 15 characters without complexity. ...
    (microsoft.public.windows.server.active_directory)
Quantcast