Windows AD: Password Status: Expired

Posted on 2012-09-10
Last Modified: 2012-09-11
In Windows AD, when a password has expired, does that allow a user to log in and change his password?

I ask because I am trying to determine if having an account disabled is the same as having an account enabled with an expired password.

Question by:NYGiantsFan
    LVL 39

    Accepted Solution

    Yes, expires password means only that user cannot use it anymore. The next time he/she types it, system will force password change and user will be still able logging into domain.

    When you want to disallow user logging, you need to disable the account. This is only supported case for that.

    Another option is temporary account where it is expiring. Account expires and then it cannot be used anymore. But expired password is not secure in that meaning


    Author Closing Comment

    Thanks... Do you have any documentation reinforcing that by chance?  thanks
    LVL 39

    Expert Comment

    by:Krzysztof Pytko
    You're welcome :) Unfortunately, no. This is based only on my own experience :)
    ... and this is working as designed :)


    Featured Post

    PRTG Network Monitor: Intuitive Network Monitoring

    Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

    Join & Write a Comment

    Suggested Solutions

    BIND is the most widely used Name Server. A Name Server is the one that translates a site name to it's IP address. There is a new bug in BIND (, affecting all versions of BIND 9 from BIND 9.1.0 (inclusive) thro…
    Phishing is at the top of most security top 10 efforts you should be pursuing in 2016 and beyond. If you don't have phishing incorporated into your Security Awareness Program yet, now is the time. Phishers, and the scams they use, are only going to …
    Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
    With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now