Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 239
  • Last Modified:

Active Directory - Administrators Password

Environment: Active Directory 2003 on Server 2003 SP2.

We know we can have only one Account policy in 2003, but we manually asked all Admins to use 16 chars complex password. Now the challenge is how we can force users to change their passwords after certain days. Not sure if this can be achieved using script which would prompt users to change password? Looking for a solution other then moving to server 2008
0
elchermans
Asked:
elchermans
1 Solution
 
Mike KlineCommented:
You can use maximum password age in the PW policy.

http://technet.microsoft.com/en-us/library/cc736566(v=ws.10).aspx

Thanks

Mike
0
 
uescompCommented:
Have group policy manage that as stated above.  A couple things to keep in mind is that in AD if a user is set to never expire that overides group policy.

Also if the users have not changed their password in lets say 60 days, and you set the group policy to 100, they will get prompt for a password change in 40 days vs the 100.  Group policy goes by the age of the password so if you have users who have not change their password in a long time (past what you specify), they might get disconnected because their password expires immediatly and they would then have to logout and log back in for the password change.
0
 
elchermansAuthor Commented:
Looking for a solution for a group of users not for whole domain.

Want my administrators to change password every 20 days compared to account/password policy which says 90 days
0
 
Pankaj_401Commented:
It's a group policy

Computer settings => Windows settings => Security => Password settings

90 days is the maximum password age , in the same tab it's also possible to enforce the password history and if password complexity should be activated.

Also check out the link for password best practices

http://technet.microsoft.com/en-us/library/cc784090(WS.10).aspx
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now