Active Directory password change policy

How do I set a password policy for expiration in Active Directory for a domain and all it's objects? Say I want to change the number of days before it requires a change.
Who is Participating?
lalocehConnect With a Mentor Commented:
sorry, is  Default Domain Policy
There will be one already done, it will be in the default domain policy, under competer settings, security.  Just modify it to your requirements.
lalocehConnect With a Mentor Commented:
You need to modify the Default Domain Controller Policy

Then go to Computer Configuration\Windows Settings\Account Policies/Password Policy
And change Maximum Password age for the number of days you need

Adam BrownConnect With a Mentor Sr Solutions ArchitectCommented:
One of the Microsoft recommendations is to create a new GPO with Password policies and tie it to the Domain, then make sure it's listed first. This is because making constant modifications to the Default Domain Policy and Default Domain Controllers policy can cause corruption, which can result in some problems. The settings mentioned will do this for you if you create a new GPO. Just note that there can only be one Password policy per Domain with a GPO. You can use Fine Grained Password policies for fine tuning if needed, but this isn't done with a GPO.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.