Requiring domain password change



I want to require all domain users (except users accounts with passwords that
do not expire) to change their password on a specific day. I understand that
I need to set it from the Default Domain Policy but I'm not 100% sure that
it's the "Maxium Password Age" setting that I need to change. Currently the
maximum password age is set to 0 so we don't require users to change their
passwords on set interval.

- Let's say today is Monday and I want them to change their network
passwords on Thursday. Would I need to change the "maximum password age" to
3 or 4 days? Is the timestamp for this value set once I change the value
from 0 to 3?

- And if I don't want the passwords to expire again after I change the value
to 3 or 4, I would assume I need to set it back to value 0 once everyone
changes their password.

- Also, is there a way to set Windows to warn the user a day or two before
they have to change their password?

Thanks.
.



Relevant Pages

  • Re: Requiring domain password change
    ... if the user is logged on while the Maximum Password Age is changed ... And if I don't want the passwords to expire again after I change the ... support all at once. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Requiring domain password change
    ... I need to set it from the Default Domain Policy but I'm not 100% sure that ... it's the "Maxium Password Age" setting that I need to change. ... Would I need to change the "maximum password age" ... And if I don't want the passwords to expire again after I change the ...
    (microsoft.public.windows.server.active_directory)
  • AD 2003 password expiration/complexity question
    ... if my domain policy says maximum password age is zero days (passwords never ... expire) and i change it to an arbitrary number, say 10, and all accounts are ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password Change
    ... Account Settings- Password Policy- We have the Maximum Password age set to ... thought it would expire on log in only. ... at logon has a certain "life expectancy" during the session which may be defined under the Kerberos Policy of the domain policy. ... some network resources like Exchange and ISA will periodically challenge the ...
    (microsoft.public.windows.server.active_directory)
  • Notifying users of password expiration via e-mail`
    ... I have a large group of off domain users to contend with, ... they cannot be notified at login time that their password will expire. ...
    (Focus-Microsoft)