Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Password Policy - Server 2008 R2

Posted on 2016-07-19
3
Medium Priority
?
64 Views
Last Modified: 2016-07-19
Hello,

I am trying to setup a 90 day refresh of user passwords in AD.

What is the maximum and minimum password age? What do i need to set to make this work?
0
Comment
Question by:Cobra25
  • 2
3 Comments
 
LVL 11

Accepted Solution

by:
Old User earned 2000 total points
ID: 41719849
Maximum password age will be 90 days, minimum is the time before the user can change again, I normally make this 7 days but that is upto you. See link below for help in setting it up

http://www.grouppolicy.biz/2011/08/tutorial-how-to-setup-default-and-fine-grain-password-policy/

Don't forget a reminder to let the users know their password is going to expire

Group Policy - Default Domain - Policies - Windows Settings - Security Settings - Local Policies - Security Options

Interactive logon: Prompt user to change password before expiration
0
 
LVL 4

Author Comment

by:Cobra25
ID: 41719952
i put this into effect and it started prompting users to change their password right away.

How do i delay this a bit??
0
 
LVL 11

Expert Comment

by:Old User
ID: 41720251
This is because all password are already older than 90 days or are close to 90 days. You need to get everyone to reset their password before making it live.
0

Featured Post

NFR key for Veeam Agent for Linux

Veeam is happy to provide a free NFR license for one year.  It allows for the non‑production use and valid for five workstations and two servers. Veeam Agent for Linux is a simple backup tool for your Linux installations, both on‑premises and in the public cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this post we will be converting StringData saved within a text file into a hash table. This can be further used in a PowerShell script for replacing settings that are dynamic in nature from environment to environment.
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

963 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question