We help IT Professionals succeed at work.

Fine Grained Password Policy Behavior

IKtech
IKtech used Ask the Experts™
on
I have setup my first Fine Grained Password Policy in AD and I have setup a group with the Policy applied to it.  Currently I am the only user in the group as I wanted to get a feel for how this policy would affect the users.

I haven't been prompted to change or update my password as my PW already meets the policy requirements.  I'm curious if changing the policy will result in any users that don't meet the length or complexity, for example, will be required to change a password.  Or, if I will need to set an expiration or require password change at next login to ensure the policy is being met.

In other words will I need to initiate a password change for the policy to take affect or will the policy force users that don't meet policy requirements to change the password?

Any insight you have on this will be appreciated!  Thanks!
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Network Engineer
Commented:
Password policies are applied when a password is changed. Therefore, any changes to complexity requirements, length, or password age will not impact any current password. Only when a user changes their password will they be subject to the new password policy. If users currently have password that will expire, then what we usually do is just let them get the new password policy as their passwords expire. If you mass select accounts to change password upon next login, then that creates a lot of hassle for users and help desk.

TL:DR " I need to initiate a password change for the policy to take affect"
Shaun VermaakSenior Consultant
Awarded 2017
Distinguished Expert 2018

Commented:
In other words will I need to initiate a password change for the policy to take affect or will the policy force users that don't meet policy requirements to change the password?
No, it will come in effect when user need to change their password on next password expiration