Solved

NO 14 day password expiring notification

Posted on 2011-03-07
10
812 Views
Last Modified: 2012-05-11
I have a server 2008 domain with two domain controllers. My users are running xp x32, vista x32, and windows 7 x64. Recently the users have been getting locked out as they are no longer getting reminders to change their passwords. The GP is set for 14 day notice.
0
Comment
Question by:matrix1324
10 Comments
 
LVL 1

Expert Comment

by:dbradley626
Comment Utility
1)   Load Group Policy Editor ( Start --> Run --> gpedit.msc )

2)   Expand sections as follows -

Computer Configuration --> Windows Settings --> Security Settings --> Account Policies --> Password Policy

Set 'Maximum password age' to 0 to totally disable expiry.
0
 

Author Comment

by:matrix1324
Comment Utility
I don't want to disable it from expiring, i want the users to get the 14 day notice when they log into their systems that they are not getting.
0
 
LVL 8

Expert Comment

by:dkumar82
Comment Utility
apply group policy mentioned by dbradley626 on default domain policy
0
 

Author Comment

by:matrix1324
Comment Utility
Ok i am in local group policy editor on the domain controller, and have gone to the location you instructed. Here is the settings i have:

Enforce password history - 10 passwords remembered
Maximum password age -  60 days
Minimum password age - 1 day

Then in local policies>security options:
Interactive logon: prompt user to change password before expiration - 14 days

But once again the users are not getting the 14 day prompt. Can you make any other suggestions or explain to me how setting Set 'Maximum password age' to 0 to totally disable expiry, is supposed to fix this?

Thank you!
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 

Author Comment

by:matrix1324
Comment Utility
Just to note, when i load rsop.msc and go to the same location >computer configuration>windows settings>Local Policies>Security Options> prompt user to change password before expiration - Not defined

Can someone explain this?
0
 

Author Comment

by:matrix1324
Comment Utility
I have double checked the users in AD to ensure they are NOT set to "password never expires"
0
 

Author Comment

by:matrix1324
Comment Utility
Any experts have any information, Please?
0
 
LVL 8

Accepted Solution

by:
dkumar82 earned 500 total points
Comment Utility
Install GPMC tool and from here browse default domain policy and re-check your password policy as well security options:Interactive logon: prompt user to change password before expiration - 14 days

Then cross check the default computer container should not have Block policy inheritance.

From client machine - Run Gpupdate /force ..Gpupdate /sync

Then run gpresult /v and post the result here .
0
 
LVL 68

Expert Comment

by:Qlemo
Comment Utility
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

In this guide, I outline 7 key steps to help technology professionals grow their careers. Whether you have been working in technology for 10 years or for 10 days, follow these steps to help you achieve your career goals and pursue your passions.
Are you one of those front-line IT Service Desk staff fielding calls, replying to emails, all-the-while working to resolve end-user technological nightmares? I am! That's why I have put together this brief overview of tools and techniques I use in o…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now