AD and user Passwords

I have a password issue with user JJackson (which happens to be my account).  Right now the account is set for the password never to expire..  when I remove this check box the next logon I am prompted with the message states “Your Password Expires today”  “do you want to change it now?”
I have a gpo “Password Policy”
•      This password policy  is set as follows
o      History 4 passwords
o      Maximum  90 days
o      minimum 30 days
o      Minimum length  6 characters
From the machine I am using  and running rsop.msc is shows
Computer Configuration > Windows Settings > Security Settings > Account Policy>Password Policy ---      
Enforce password history  4 passwords remembered
Maximum  Password age   90 days
Minimum password age  30 days
Minimum password length  6 characters
When I change my password it and log out and back on I am once again greeted with the message states “Your Password Expires today”  “do you want to change it now?”

I have verify that no other settings are set this way and IF I “COPY” my account to make a new user it does the same… Where do I find this hidden attribute that has my password expiring every 24 hours.
JaysonJacksonAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Emmanuel AdebayoGlobal Windows Infrastructure Engineer - ConsultantCommented:
Hi,

Have you checked the password attribute for the account?

Set pwdLastSet attribute on his Active Directory account to today’s date.

You can get to this by enable the Advance features and navigate to

The following link might help.

http://community.spiceworks.com/how_to/show/29586-active-directory-how-to-reset-password-expiration-date

Regards
0
JaysonJacksonAuthor Commented:
thanks
I checked the attribute on this account and it shows

pwdlastset    9/7/2013 *:43:35 PM which is correct.
0
Mike KlineCommented:
Password policy is being set at the domain, check the GPOs linked at the domain level.  Is that where you are running an RSOP from.

Are you using fine grained password policies.

Thanks

Mike
0
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

JaysonJacksonAuthor Commented:
i have no fine grained password policies defined  and i am running rsop from the domain level.
0
Mike KlineCommented:
If you change your password using ADUC does the same thing happen.  Is this happening on only your account only or is it happening to others too?

Thanks

Mike
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
JaysonJacksonAuthor Commented:
yes the same thing happens.    right now this is only my account and as a test i copied my account to create a new account for a test user and the same thing applies
0
JaysonJacksonAuthor Commented:
Mike. i believe that i found the issue and it was with a fine grained password policies that was defined.    the msDS-MaximumPasswordAge was set to 1    

not sure why this was only applied to my account but seems to be working now. thanks again.
0
Mike KlineCommented:
Glad to help, good find.  By the way it is much easier to work with FGPP in 2012 through the GUI in ADAC

http://blogs.technet.com/b/reference_point/archive/2013/04/12/fine-grained-password-policies-gui-in-windows-server-2012-adac.aspx

You just need a 2012 member server to get that (or windows 8 with RSAT.

Thanks

Mike
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.