• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 826
  • Last Modified:

NO 14 day password expiring notification

I have a server 2008 domain with two domain controllers. My users are running xp x32, vista x32, and windows 7 x64. Recently the users have been getting locked out as they are no longer getting reminders to change their passwords. The GP is set for 14 day notice.
1 Solution
1)   Load Group Policy Editor ( Start --> Run --> gpedit.msc )

2)   Expand sections as follows -

Computer Configuration --> Windows Settings --> Security Settings --> Account Policies --> Password Policy

Set 'Maximum password age' to 0 to totally disable expiry.
matrix1324Author Commented:
I don't want to disable it from expiring, i want the users to get the 14 day notice when they log into their systems that they are not getting.
apply group policy mentioned by dbradley626 on default domain policy
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

matrix1324Author Commented:
Ok i am in local group policy editor on the domain controller, and have gone to the location you instructed. Here is the settings i have:

Enforce password history - 10 passwords remembered
Maximum password age -  60 days
Minimum password age - 1 day

Then in local policies>security options:
Interactive logon: prompt user to change password before expiration - 14 days

But once again the users are not getting the 14 day prompt. Can you make any other suggestions or explain to me how setting Set 'Maximum password age' to 0 to totally disable expiry, is supposed to fix this?

Thank you!
matrix1324Author Commented:
Just to note, when i load rsop.msc and go to the same location >computer configuration>windows settings>Local Policies>Security Options> prompt user to change password before expiration - Not defined

Can someone explain this?
matrix1324Author Commented:
I have double checked the users in AD to ensure they are NOT set to "password never expires"
matrix1324Author Commented:
Any experts have any information, Please?
Install GPMC tool and from here browse default domain policy and re-check your password policy as well security options:Interactive logon: prompt user to change password before expiration - 14 days

Then cross check the default computer container should not have Block policy inheritance.

From client machine - Run Gpupdate /force ..Gpupdate /sync

Then run gpresult /v and post the result here .
QlemoBatchelor and DeveloperCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now