asked on

Users not receiving Windows 7 password expiration notice

Hi,

My users are not noticing when their domain passwords are expiring in Windows 7. I can see by looking at the message center flag that my password is set to expire in a few days. My users do not notice this and I've been seeing a big uptick on calls from users that have locked accounts. Is there a way to have some sort of GUI pop up like in XP when a password is set to expire in X amount of days?

Thanks.

ASKER CERTIFIED SOLUTION

GlobaLevel

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Michael

1. Enter gpedit.msc in Start Search box.
2. Navigate to

Computer Configuration\Windows Settings\Security Settings\Local Policies - Security Options

3. In the right pane, double-click on the policy “Interactive logon: Prompt user to change password before expiration”.
4. Change the value you want.

Another possible reason is that the local cached certification is used when log on when the network connection is not established. In this case the password expiration information will not be delivered to the client computer. You may need to enable the policy “Computer Configuration\Administrative Templates\System\Logon\Always wait for the network at computer startup and logon to the computer” although it will slower the log on speed for every users. Fundamentally, it is a slow network connection problem at startup. It can be related to the compatibility of the DNS, DHCP server or the local network adapter driver.

AMREP

ASKER

@Global
I haven't done a VBScript but I may try it.

@Ken
Both those settings are enabled on the PDC and in a GPO that I created for the domain. Yet still no joy. Maybe I have a replication issue?

Michael

If you can still find no love, you can send an automatic email out to users that will notify them using the instructions in this link

http://blogs.dirteam.com/blogs/jorge/archive/2008/07/20/notifying-users-by-e-mail-their-password-is-going-to-expire.aspx

I'll keep digging...

SOLUTION

Michael

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

GlobaLevel

Ken made some great comments..additionally, note that Windows 7 is a different beast and there are ton issues vbscript may be needed for...if you dont use the GPO..like network printers and the such...

AMREP

ASKER

I just think creating a VBScript isn't really a "solution" to the problem. I wish Microsoft would have left that functional part of XP alone. Thanks for your help guys. I'm splitting the points because you both helped with a resolution.

GlobaLevel

AMREP..thanks for the points..I agree...unlike other visions like vista, XP, and older...windows will probably be needing the custom touch with vbscript...get to know WMI...its a life saver!

http://www.computerperformance.co.uk/vbscript/wmi_basics.htm

Michael

Here's a freeware that offers a solution:

http://www.windows7download.com/win7-netwrix-password-expiration-notifier/kextwfmg.html