[Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 215
  • Last Modified:

User accounts expiring when not expecting them to

I'm finding that many of my users accounts are seeming to expire, but we've got the policies set so they don't expire. (this is an interim solution, using blank passwords until they can be correctly synchronised with another system) Has anyone seen this before and have an explanation ? resetting 2000 accounts manually is not too appealing ! thanks
0
webtechy
Asked:
webtechy
  • 4
  • 3
1 Solution
 
joedoe58Commented:
Do you try to set it with Group policy? If so do you know if the policy is applied? run rsop.msc on workstation if they are xp
0
 
webtechyAuthor Commented:
It's server 2003. I tried the rsop.msc but it doesn't want to gather the info to check the policies. I have done this in the past though, and they were applied correctly. I've also seen policies for the group in the active directory, but can't see one setup now that would effect the password expiry.
0
 
joedoe58Commented:
You can also see the effective settings on your workstation by using "Security Configuration and Analysis" To check that you type mmc in the run command. Then you add the above mentioned console. You then follow the instructions in the window to analyze your computer. There you will see what your effective settings are
0
Get your Disaster Recovery as a Service basics

Disaster Recovery as a Service is one go-to solution that revolutionizes DR planning. Implementing DRaaS could be an efficient process, easily accessible to non-DR experts. Learn about monitoring, testing, executing failovers and failbacks to ensure a "healthy" DR environment.

 
webtechyAuthor Commented:
Thanks, that's collected the RSoP data now. That confirms that the maximum password age is 'not defined' though, and that the 'passwords must meet complexity requirements' is disabled. I'm trying to see if there's something in the AD settings that is effecting this .. it doesn't store this on a per-user basis does it ? a lot of the users were imported from another system (Novell) on which they _do_ expire about every 30 days. Ultimately this AD will be synced with that (or replace it) though
0
 
joedoe58Commented:
If you setting is not defined in the policy that means that whatever is in force on the specific system will take precendence therefore if you want it to be applied you have to set it to disabled
0
 
webtechyAuthor Commented:
OK, that may be it I guess - I've set it explicitly to not expire in there now. Would be useful to be able to make sure any existing ones that think they're expired don't cause problems anymore - will have to wait and see on that I suppose. Bound to find out quickly if there's a problem, you always do. Cheers
0
 
joedoe58Commented:
The policy will be updated every 90 minutes if I am not wrong
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now