Set password to expire in XX days - How is this done? 1

[southbeach]

I need to start enforcing a policy where users have to change their password every XX number of days. I found where to change the number of days prior to expiration days they will get a notice but not where the expiration period is set.

When I add new users, I do not get an option (obvious one any way) where I can set the password to expire in 90 days.

Where is this set? Since I now have about 68 users, I hope this can be set for all users by applying or editing a policy.

Thanks!

--
SouthBeach
The good thing about not knowing is the opportunity to learn - Yours truly, 2008.

 

[scottew]

On your DC, use Group Policy Management to configure a GPO. Go to Computer Configuration / Windows Settings / Security Settings / Account Policies / Password Policy.

Set Maximum Password Age to 90 days.

 

[southbeach]

I am not able to edit the value, field is not editable.

Is there something else that must be set/configured first?

Thanks,


--
SouthBeach
The good thing about not knowing is the opportunity to learn - Yours truly, 2008.

 

[58sniper]

Like search here for this topic, as it's been discussed many times?

"How do I.." questions are almost ALWAYS answered via a search.

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.

http://www.ucblogs.net/blogs/exchange/

 

[southbeach]

Scott, thank for the call, I appreciate your holding me by the hand and assisting me with this.

For the benefit of others here:
1. Download and install this

http://www.microsoft.com/downloads/...24-8cbd-4b35-9272-dd3cbfc81887&displaylang=en

2. Start -> Run -> gpmc.msc

3. Expand Group Plicy Objects

4. Right click Default Domain Policy -> Edit

5. Go to Computer Configuration / Windows Settings / Security Settings / Account Policies / Password Policy

Here you can set Maximum pasword age to any number of days. If set to 0, it means that password will never expire.

To set the number of days prior to expiration users are given notice:

1. Start -> Run -> gpmc.msc

2. Expand Group Plicy Objects

3. Right click Default Domain Policy -> Edit

4. Computer Configuration / Windows Settings / Security Settings / Local Policies / Security Options

Here, you can scroll down to Interactive Logon: and change "Prompt user to change password before expiration" to any number of days suit you.



--
SouthBeach
The good thing about not knowing is the opportunity to learn - Yours truly, 2008.