Change Password Expiration Date

[D4B]

Hi Guys, i need a help Here. I have installed Windows 2000 Server, everything was working fine, but the users are receiving the message : "Your password will expire in 14 days ", I would like to change the expiration time from 14 days to 2 or 3 days, it should be easy, but i still haven't figured it out.

Thanks

 

[MasterRacker]

It sounds like what you're really asking is to shorten the warning period. Under NT you couldn't do it from the server and I haven't seend or read anything to suggest this has changed with Win2K. This means you're stuck changing it on each and every workstation. I would suggest no less than 4 days to cover weekends easily.

The registry key is:
[tt]
; --- Reduce password expiration notification to 4 days.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"PasswordExpiryWarning"=dword:00000004
[/tt]

Jeff
masterracker@hotmail.com

If everything seems to be going well: you don't have enough information.......

 

[Guest_imported]

Hi,

Not entirely correct, MasterRacker. The password expiration period can be manipulated very easily via the DC policy in AD. Go into AD and open the GPO for the root domain (i.e. workingsoftware.microsoft.com). Once there, go to COMPUTER CONFIGURATION->WINDOWS SETTINGS->SECURITY SETTINGS->ACCOUNT POLICIES->PASSWORD POLICIES. One note of caution is that this is the only place for the domain that would cause the password policy to be correclty enforced on all subsequent containers. Even if you set this policy under a specific OU, it will not work. It has to be set under the DC policy.

Hope this helps.

 

[Filexc]

You're right about implenting the domain policy on W2K Server. But how is it possible to prevent that annoying "Your password will expire in 14 days" pop-up from showing up? Say I want to display it in last 3-4 days.

 

[MasterRacker]

The pop-up will begin displaying on the first day of the expiry period. If you set the expiration to 4 days, the warning will not start until you only have 4 days. That registry setting is not for how long the password lasts. It is for how long the warning period is.

Gandahar, I believe you're referring to the password life, which indeed is a domain wide setting. I am referring to a different setting which is the warning window, which is a local machine setting.
Jeff
I haven't lost my mind - I know it's backed up on tape somewhere ....