Prompt user to change password before expiration not working

I am using a Windows Server 2003 network with Windows XPsp3 workstations.

In Active Directory Users and Computers:

My computer is in "Computers" OU.
My user is in "Users" OU.
My user has password expiration set to 2 days from now (for testing purposes).
"Password never expires" is unchecked.



In "Default Domain Policy" Group Policy:

Interactive logon: Prompt user to change password before expiration = "Enabled"
Set manually at 7 days.

(XP Professional Fast Logon turned off)
Always wait for the network at computer startup and login = "Enabled"

GPO status = "Enabled"

GPO set to apply to "Authenticated Users" and "Domain Computers"

Group Policy Results (based on my computer & my user) show this policy to be valid/applied.

Running RSOP on my computer for my user shows policy to be applied

Checking registry (HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\) REG_DWORD passwordexpirywarning is set to 7.

When I log in, I do not get any notification that my password is expiring.
BHRAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Krzysztof PytkoSenior Active Directory EngineerCommented:
You need to change your password first to take effect. After that you should be informed that your password will expire. Check that, please

Regards,
Krzysztof
0
BHRAuthor Commented:
That did not work Krzysztof.
0
BHRAuthor Commented:
I figured the problem out.  I was confusing "password expiration" with "account expiration".  I had been setting "Account expires" date in active directory & needed to set the maximum password age in group policy.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Azeem PatelSystem AdministartorCommented:
Did it worked for you .. have you tested.
0
BHRAuthor Commented:
Yes.  One thing I found was that there can be only one password policy (in our case the default domain policy), so it made it difficult to test.  I ended up accidentally forcing a few users to change their passwords prematurely, but was able to test the functionality sucessfully.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.