RE: additional Windows 2000 password policy questions

From: Tyson Leslie (Leslie.Tyson_at_colteng.com)
Date: 06/24/03

  • Next message: Sean Hittel: "Please read. Post containing BugBear.B"
    To: focus-ms@securityfocus.com
    Date: Tue, 24 Jun 2003 14:59:00 -0600
    
    

    That's a crazy policy to test with...

    I don't recall off the top of my head when the warnings start, but 13 days
    is coming to mind... Don't take my word for it though, test it out, or you
    can look it up.

    As for removing the policy, you can do a couple of things - you can change
    the settings in the policy to "Not Defined", you can disable the policy, or
    you can delete the policy. The changes are not permanent, except for one
    thing: if you have set the maximum password age to 3 days, and you disable
    the policy, that setting will stay in effect, on the accounts that already
    exist.

            Tyson.

    -----Original Message-----
    From: hong li [mailto:hong_li_98@yahoo.com]
    Sent: June 24, 2003 11:16 AM
    To: focus-ms@securityfocus.com
    Subject: additional Windows 2000 password policy questions

    Hi,

    Thanks for all your replies. I really appreciate it.
    I implement one password policy to test as follows:
                     max password age: 3 days
                     min password age: 2 days

    What are the default days for reminding users to
    change password? The screen pops users to change
    password constantly even if the users changed their
    passwords already. Also, the users can not open/logon
    outlook due to the constantly expired password. Do
    you know why?
     
    If I want to take this policy out. What's effective
    way to do?
    Can I change max pass age : 0 day
                 min pass age : 0 day
    will this overwrite the previous one policy?

    Thanks for all your help.

    Hong

    __________________________________
    Do you Yahoo!?
    SBC Yahoo! DSL - Now only $29.95 per month!
    http://sbc.yahoo.com

    ----------------------------------------------------------------------------
    -
    ----------------------------------------------------------------------------

    --
    -----------------------------------------------------------------------------
    ------------------------------------------------------------------------------
    

  • Next message: Sean Hittel: "Please read. Post containing BugBear.B"

    Relevant Pages

    • additional Windows 2000 password policy questions
      ... What are the default days for reminding users to ... outlook due to the constantly expired password. ... If I want to take this policy out. ... SBC Yahoo! ...
      (Focus-Microsoft)
    • Re: And what will happen when I change the Complexity?
      ... becuase company policy required 8 characters. ... The Microsoft public news server is msnews.microsoft.com and you can ... The user account password is not set to Password Never Expires. ... Get the 'Maximum Password age' value dictated by domain policy, ...
      (microsoft.public.windows.server.sbs)
    • Re: Default Domain Policy - Password Policy
      ... You might want to instead set pwdLastSet to 0 in stages for users to force them to change at next logon and then when that's completed set the max age. ... last set for each user account. ... This means that if you set the initial Maximum Password Age too low, you will likely cause expiration of all passwords - so all users will be prompted to change their passwords at their next logon. ... is there a domain-wide policy setting to expire all passwords? ...
      (microsoft.public.windows.server.active_directory)
    • Re: Default Domain Policy - Password Policy
      ... Is there a way to find the value of domain users' pwdLastSet? ... I will change the Maximum Password Age = 365. ... last set for each user account. ... is there a domain-wide policy setting to expire all ...
      (microsoft.public.windows.server.active_directory)
    • Re: Default Domain Policy - Password Policy
      ... Is there a way to find the value of domain users' pwdLastSet? ... I will change the Maximum Password Age = 365. ... last set for each user account. ... is there a domain-wide policy setting to expire all ...
      (microsoft.public.windows.server.active_directory)