Cached account password expiry

Hi all,

I need to know where I set the password expiry time in GP for cached accounts/machines that are away from the DC for extended periods of time can anyone help me out I cant figure out where to set it.

Thanks for your help.
Who is Participating?
msmamjiConnect With a Mentor Commented:
Cached domain account password are useful indefinitely meaning they do expire on the AD, but user will not be prompted to change his/her passoword in they are not connected to the AD, nor will cached password expire. When the user do connect to the AD, they will be prompted to change the password.

The computers connected to the machine also have password which also expire, I believe the time limit is 30.  When you connect a machine after such time, you would require to resync the machine password, disjoin/join of machine will achieve the same.

I don't think there is anything explicitly available in GP to control "cached credential" password expiry. The only thing that you can change is the number of cached credential allowed on a machine.

Hope that helps.
pnorris99Author Commented:
Thanks mate your a star
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.