Solved

Active Directory - Administrators Password

Posted on 2013-05-17
4
231 Views
Last Modified: 2013-09-11
Environment: Active Directory 2003 on Server 2003 SP2.

We know we can have only one Account policy in 2003, but we manually asked all Admins to use 16 chars complex password. Now the challenge is how we can force users to change their passwords after certain days. Not sure if this can be achieved using script which would prompt users to change password? Looking for a solution other then moving to server 2008
0
Comment
Question by:elchermans
4 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 39175229
You can use maximum password age in the PW policy.

http://technet.microsoft.com/en-us/library/cc736566(v=ws.10).aspx

Thanks

Mike
0
 
LVL 16

Accepted Solution

by:
uescomp earned 500 total points
ID: 39175278
Have group policy manage that as stated above.  A couple things to keep in mind is that in AD if a user is set to never expire that overides group policy.

Also if the users have not changed their password in lets say 60 days, and you set the group policy to 100, they will get prompt for a password change in 40 days vs the 100.  Group policy goes by the age of the password so if you have users who have not change their password in a long time (past what you specify), they might get disconnected because their password expires immediatly and they would then have to logout and log back in for the password change.
0
 
LVL 1

Author Comment

by:elchermans
ID: 39175403
Looking for a solution for a group of users not for whole domain.

Want my administrators to change password every 20 days compared to account/password policy which says 90 days
0
 
LVL 5

Expert Comment

by:Pankaj_401
ID: 39181377
It's a group policy

Computer settings => Windows settings => Security => Password settings

90 days is the maximum password age , in the same tab it's also possible to enforce the password history and if password complexity should be activated.

Also check out the link for password best practices

http://technet.microsoft.com/en-us/library/cc784090(WS.10).aspx
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now