Password policy: Your password will expire...

[keepingbusy]

Hi

I am looking for a solution as to why we keep getting the message "Your password will expire in xx days. Do you want to change it now?" when logging on.

I note in the Microsoft Server 2003 Group Policy help file:

Maximum password age determines how many days a password can be used before the user is required to change it. The value of this setting can be between 0 and 999; if it is set to 0, passwords never expire. Setting this value too low can cause users to be frustrated; setting it too high or disabling it gives potential hackers more time to determine passwords. For most organizations, this value should be set to 42 days.

I have had no problem in changing the relevant setting which has now been set to 28 days.

My question here is, what setting do I change to allow the password expiry length of time to remain at 28 days but only remind the user logging in 14 days before it is due to expire?

Some guidance would be appreciated.

Thank you.

 

[Davetoo]

Look in your Domain Policy settings on your DC.

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

There are no more PDC's! There are DC's with FSMO roles!

 

[keepingbusy]

Sorry Davetoo, I'm a newbie administrator. I am ok at editing the Group Policy Settings but what is DC (or is it obvious)?

Thank you

 

[pagy]

DC = Domain controller

Paul
MCSE 2003
MCTS:Active Directory
MCTS:Network Infrastructure
MCTS:Applications Infrastructure

If there are no stupid questions, then what kind of questions do stupid people ask? Do they get smart just in time to ask questions?
Scott Adams

 

[keepingbusy]

pagy

Thank you

 

[keepingbusy]

For anyone searching this forum for a similar request as mine, the sollution was found in Group Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options > Interactive logon: Prompt user to change password before expiration (Then change the amount of days).

This setting was changed to 7 days before expiring with the actual password time of 28 days.

Thanks to those who gave me the initial help on where to look.

Hope the above helps

KB

"Alone we can do so little, together we can do so much"