RE: Password Expiry

From: Charles Yang [MSFT] (v-chayan_at_online.microsoft.com)
Date: 01/31/05


Date: Mon, 31 Jan 2005 12:05:34 GMT


Hi Fec,
 
Thank you for your post.
 
According to your description, I understand that you encountered a problem
that the server suddenly asking the users to change their passwords. If I
am off base, please let me know.
 
In order to isolate the problems, we would like to collect the following
information:
 
1. Which edition of server you use, SBS2000 or SBS2003? We may use
different methods to treat with different system.
2. Could you explain the way that you set the password policy?
3. These problems occur in all the computers, or only occur in some
computers.
 
If the problems only occur in a client computer, we suggest you reconfirm
the GPO using RSoP in this client computer which running Windows Xp. Please
follow the steps below:
 
1. Click "Start" then point to "Run".
2. Run rsop.msc.
 
In the RSoP windows you can follow the detail steps below to check the
results of the password policy:
 
1. Expand the "Computer Configuration->Windows Setting->Security
Setting"
2. Click the Account Policy, and then point to the password policy.
Make sure that the Maximum age is set properly.
 
If the problems occur in the entire domain, we suggest you reconfirm the
GPO by running RSoP on a domain and Organization Unit in the SBS server
2003. Please see the detail steps below:
 
How to Run an RSoP Query on a Domain
1. Click Start, click Control Panel, double-click Administrative Tools, and
then double-click Active Directory Users and Computers.
2. In the console tree, expand Active Directory Users and Computers; expand
Domains, and then right-click the domain on which you want to run RSoP.
3. Point to All Tasks, and then click Resultant Set of Policy (Planning).
 
How to Run an RSoP Query on an Organizational Unit
1. Click Start, click Control Panel, double-click Administrative Tools, and
then double-click Active Directory Users and Computers .
2. In the console tree, expand Active Directory Users and Computers, expand
Domain, expand Organizational unit, and then expand child organizational
unit.
3. Right-click the organizational unit on which you want to run RSoP, point
to All Tasks, and then click Resultant Set of Policy (Planning) .
 
In the RSoP windows please follow the steps below to check the results of
the password policy:
 
1. Expand the "Computer Configuration->Windows Setting->Security Setting"
2. Click the Account Policy, and then point to the password policy. Make
sure that the Maximum age is set properly
 
More info:
 
How To Install and Use RSoP in Windows Server 2003
 http://support.microsoft.com/default.aspx?scid=KB;EN-US;323276
 
HOW TO: Define Security Templates By Using the Security Templates Snap-In
in Windows Server 2003
http://support.microsoft.com/default.aspx?scid=KB;EN-US;816297
 
 
I hope the above information is useful to you, if you have any questions
please feel free to let me know.
 
Have a nice day!
 
 
 
Charles Yang
Online Partner Support
Partner Support Group
Microsoft Global Technical Support Center
 Mailto: v-chayan@microsoft.com
 

Sincerely,

Charles Yang (MFST)

Microsoft Online Support Engineer

Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader

so that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



Relevant Pages

  • Help with 070-217
    ... The network contains 25,000 computers. ... single Windows 2000 domain named research.contoso.com. ... Server computers that are configured as domain controllers. ...
    (microsoft.public.cert.exam.mcse)
  • Re: Help with 070-217
    ... The network contains 25,000 computers. ... > single Windows 2000 domain named research.contoso.com. ... > Server computers that are configured as domain controllers. ...
    (microsoft.public.cert.exam.mcse)
  • RE: Help with 070-217
    ... The network contains 25,000 computers. ... > single Windows 2000 domain named research.contoso.com. ... > Server computers that are configured as domain controllers. ...
    (microsoft.public.cert.exam.mcse)
  • Re: upgrading frm XP Home to Pro
    ... Why do you think you need Windows XP Professional? ... won't and we need to upgrade all the computers to Pro. ... You bought a server to 'network your computers' and so you can ... software) would give you the same abilities as 'Remote Desktop' ...
    (microsoft.public.windowsxp.general)
  • Re: upgrading frm XP Home to Pro
    ... Why do you think you need Windows XP Professional? ... upgrade all the computers to Pro. ... You bought a server to 'network your computers' and so you can 'access them ... as 'Remote Desktop' would in Windows XP Professional. ...
    (microsoft.public.windowsxp.general)