• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 607
  • Last Modified:

Active Directory password change policy

How do I set a password policy for expiration in Active Directory for a domain and all it's objects? Say I want to change the number of days before it requires a change.
0
ifrogz_forum
Asked:
ifrogz_forum
  • 2
3 Solutions
 
Vinchenzo-the-SecondCommented:
There will be one already done, it will be in the default domain policy, under competer settings, security.  Just modify it to your requirements.
0
 
lalocehCommented:
You need to modify the Default Domain Controller Policy

Then go to Computer Configuration\Windows Settings\Account Policies/Password Policy
And change Maximum Password age for the number of days you need


0
 
lalocehCommented:
sorry, is  Default Domain Policy
0
 
Adam BrownSr Solutions ArchitectCommented:
One of the Microsoft recommendations is to create a new GPO with Password policies and tie it to the Domain, then make sure it's listed first. This is because making constant modifications to the Default Domain Policy and Default Domain Controllers policy can cause corruption, which can result in some problems. The settings mentioned will do this for you if you create a new GPO. Just note that there can only be one Password policy per Domain with a GPO. You can use Fine Grained Password policies for fine tuning if needed, but this isn't done with a GPO.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now