We help IT Professionals succeed at work.

Outlook Web Access user prompted to change password every 45 days

jfexchange
jfexchange asked
on
312 Views
Last Modified: 2008-02-26
I have a user account that is prompted to change its password every 45 days when logging into OWA.  I have disabled any configured settings in Group Policy regarding password change;  yet this user account is still prompted.  I am running a Win2k3 server running Exchang2k3 and have not been able to find any other settings pertaining to this policy.  Can anyone suggest a way to get rid of this configuration or suggest why it may be occurring?  This account only uses OWA and is not logging into the domain.
Many Thanks!
Comment
Watch Question

Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION

Commented:
sorry i forgot...
just to make sure.....XP has a new feature where u can store different users name and password for logging to differnt domains....it is in control panel\user account\advanced....make sure it is clear if the user is using and XP machine..
CERTIFIED EXPERT

Commented:
This has caused me much confusion in the past, I have to admit, and I have found four locations for settings that can affect password behaviour.  Group Policy, Domain Policy, Domain Controller Security Policy, and (if the server is a member server) Local Security Policy.  I have never managed to work out how these combine, and which takes precedence.
Donnie4572IT Manager
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION

Author

Commented:
thanks for all your comments, I don't see how local computer policy could affect an account logging into OWA in this instance since the system is not part of the domain and the user account is only authenticating via owa.  There is only one GPO in effect which is the default domain policy.  The mail server is also a DC but the password policy is not defined in the domain controller policy either.  I had checked this account object previously and password never expires was checked which I also thought was the catch all, are there any other setting that can negate this one?  
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION

Author

Commented:
Thanks for your input Vahik, I actually mispoke, that system may have been on the domain at one point so, even though it is off the network now,there maybe a remnant of the original domain policy still cached on that system somewhere?
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION

Author

Commented:
thanks all I, I have tried all these, we'll have to wait another 45 days and see if it comes back again!
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.