Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 824
  • Last Modified:

NO 14 day password expiring notification

I have a server 2008 domain with two domain controllers. My users are running xp x32, vista x32, and windows 7 x64. Recently the users have been getting locked out as they are no longer getting reminders to change their passwords. The GP is set for 14 day notice.
0
matrix1324
Asked:
matrix1324
1 Solution
 
dbradley626Commented:
1)   Load Group Policy Editor ( Start --> Run --> gpedit.msc )

2)   Expand sections as follows -

Computer Configuration --> Windows Settings --> Security Settings --> Account Policies --> Password Policy

Set 'Maximum password age' to 0 to totally disable expiry.
0
 
matrix1324Author Commented:
I don't want to disable it from expiring, i want the users to get the 14 day notice when they log into their systems that they are not getting.
0
 
dkumar82Commented:
apply group policy mentioned by dbradley626 on default domain policy
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
matrix1324Author Commented:
Ok i am in local group policy editor on the domain controller, and have gone to the location you instructed. Here is the settings i have:

Enforce password history - 10 passwords remembered
Maximum password age -  60 days
Minimum password age - 1 day

Then in local policies>security options:
Interactive logon: prompt user to change password before expiration - 14 days

But once again the users are not getting the 14 day prompt. Can you make any other suggestions or explain to me how setting Set 'Maximum password age' to 0 to totally disable expiry, is supposed to fix this?

Thank you!
0
 
matrix1324Author Commented:
Just to note, when i load rsop.msc and go to the same location >computer configuration>windows settings>Local Policies>Security Options> prompt user to change password before expiration - Not defined

Can someone explain this?
0
 
matrix1324Author Commented:
I have double checked the users in AD to ensure they are NOT set to "password never expires"
0
 
matrix1324Author Commented:
Any experts have any information, Please?
0
 
dkumar82Commented:
Install GPMC tool and from here browse default domain policy and re-check your password policy as well security options:Interactive logon: prompt user to change password before expiration - 14 days

Then cross check the default computer container should not have Block policy inheritance.

From client machine - Run Gpupdate /force ..Gpupdate /sync

Then run gpresult /v and post the result here .
0
 
QlemoC++ DeveloperCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now