5 pts.
 Password Policy + Max Password Age
Hello, I am a administrator for a large IT consulting firm. We are trying to introduce a max password age on our users. We want to change it from the default 42 days, to 30 days. My question is, can this be controlled? Or does this impat all the usrs at once? Does everyone have to chance their password at once or do they have to change it if since the last time their password was changed equals 30 days ?

Software/Hardware used:
ASKED: November 19, 2007  5:32 PM
UPDATED: November 21, 2007  7:01 PM

Answer Wiki:
Good day, password settings in a Windows domain are domain-wide, one setting affects all users. The password age is on a user by user basis, so it will be 30 days from the time the user last changed his password. Regards.
Last Wiki Answer Submitted:  November 19, 2007  6:46 pm  by  Cipher42   30 pts.
All Answer Wiki Contributors:  Cipher42   30 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _


 

Hi,

If the Users and Computers are on a domain, you’ll find the Group Policy under: Computer Configuration|Windows Settings|Security Settings|Account Policies|Password Policy – Maximum Password Age. By default, Domain Group Policies update every 90 minutes, with a 0 to 30 minute offset.

Best Regards,

 40 pts.

 

The answer provided is correct. You control this in the Default Domain Group Policy.

 5,610 pts.