• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 219
  • Last Modified:

AD password expiration warnings are gone

We changed, our password policy to change password every 60 days.
But the users are not getting the pop-up to let us know a few days ahead to change the PW.

Some users get the pop-up and some don't.
I noticed in the 'default policy' on the DC, that:  Interactive Login:  prompt user to change PW before expiration'  is not enabled.

Does that have to be enabled, and why are some users getting the pop-up and others are not?

thanks

We have Server 2003 DC's.
0
techgenious
Asked:
techgenious
  • 3
  • 3
1 Solution
 
Santosh GuptaCommented:
please run the RSOP.MSC and see if policy is applying to users.
0
 
mlsbravesCommented:
It may be because some of your users don't log off. The prompt would appear when they login so if they never log off then they may never see the warning.

See:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/06cfc1d3-12ce-4d8d-a6d3-911d1e6586f4/prompt-user-to-change-password-before-expiration-and-its-settings?forum=winserverGP

Also, have you manually ran a group policy update on the users computer?

gpupdate /force
0
 
techgeniousAuthor Commented:
I ran RSOP.msc and under 'Source GPO' it is blank meaning this is not set at the DC, default   domain Policy.

the user has logged off and logged on.   Still no message.
I also check:
-- Default Domain Controller Security Settings [blank]
-- Domain Security Policy [blank]

The above two on the DC.

Could it be it is set on the users computers:  Local Policies > security options?
0
Cloud Class® Course: Amazon Web Services - Basic

Are you thinking about creating an Amazon Web Services account for your business? Not sure where to start? In this course you’ll get an overview of the history of AWS and take a tour of their user interface.

 
Santosh GuptaCommented:
what do you mean by blank ?? seems policy is not set or reset to default.

pls expand the "Domain Security Policy" and verify these policies are there. http://support.gfi.com/manuals/en/lanscan7/lanscan7manual-1-85.html

Also check
 Computer Configuration\Windows Settings\Local Policies\Security Options under Interactive Logon: Prompt user to change password before expiration.
is configured.
0
 
techgeniousAuthor Commented:
This is 2003 DC's, picture does not appear the same.

Domain
0
 
Santosh GuptaCommented:
Strange !!!

Do you have the GPMC console installed, if yes then check from their.

run DCDIAG /V and see the erros.
0
 
techgeniousAuthor Commented:
Okay I will check it out, remember this is server 2003 DC's.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Microsoft Exchange Server

The MCTS: Microsoft Exchange Server 2010 certification validates your skills in supporting the maintenance and administration of the Exchange servers in an enterprise environment. Learn everything you need to know with this course.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now