Active Directory password change policy

Posted on 2011-05-03
Last Modified: 2012-05-11
How do I set a password policy for expiration in Active Directory for a domain and all it's objects? Say I want to change the number of days before it requires a change.
Question by:ifrogz_forum
    LVL 14

    Expert Comment

    There will be one already done, it will be in the default domain policy, under competer settings, security.  Just modify it to your requirements.
    LVL 4

    Assisted Solution

    You need to modify the Default Domain Controller Policy

    Then go to Computer Configuration\Windows Settings\Account Policies/Password Policy
    And change Maximum Password age for the number of days you need

    LVL 4

    Accepted Solution

    sorry, is  Default Domain Policy
    LVL 37

    Assisted Solution

    by:Adam Brown
    One of the Microsoft recommendations is to create a new GPO with Password policies and tie it to the Domain, then make sure it's listed first. This is because making constant modifications to the Default Domain Policy and Default Domain Controllers policy can cause corruption, which can result in some problems. The settings mentioned will do this for you if you create a new GPO. Just note that there can only be one Password policy per Domain with a GPO. You can use Fine Grained Password policies for fine tuning if needed, but this isn't done with a GPO.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Do email signature updates give you a headache?

    Do you feel like you are constantly making changes to email signatures? Are the images not formatting how you want them to? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today.

    Suggested Solutions

    I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
    Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
    This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
    This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…

    761 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    10 Experts available now in Live!

    Get 1:1 Help Now