asked on 3/14/2017

MinPasswordAge for a single user in a Windows 2012 R2 domain

Hi Experts,

I need to know if is possible to change the minPasswordAge for a single user in AD to allow him to change its password right away without affecting the global gpo for the rest of users

Need to know if this can be reached from PowerShell, please provide instruction step by step

Powershell Active Directory Windows Server 2012

Last Comment

Shaun Vermaak

3/14/2017

Lee W, MVP

3/14/2017

Use fine grained password policies in the Active Directory Administrative Center in Server Manager.

ASKER CERTIFIED SOLUTION

Sekar Chinnakannu

3/14/2017

THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.

View this solution by signing up for a free trial.

Members can start a 7-Day free trial and enjoy unlimited access to the platform.

See Pricing Options

Start Free Trial

Lee W, MVP

3/14/2017

Group Policy settings apply to EVERYONE not one user as the question asks.

Jerry Seinfield

3/14/2017

ASKER

Thanks everyone,

but I was able to modify the attribute PwdAgeSet to 0 using ADSI Edit tool for that user, and was able to change password bypassing minimum password age of the GPO

Lee W, MVP

3/14/2017

Which would have been done more safely using fine grained password policy applied to just the user.

Shaun Vermaak

3/14/2017

Agree with Lee. Better to use FGPP