Re: Implementing a Password Policy



We are about to implement a domain password policy on a network where
there was not one before. For password expiration, will every user's
password now expire on the same day?

That depends on the password age and what age you require them to change.

Set the password age to 30 days and users with passwords over 32 days will
be affected. Users with password age under 30 days will not be affected
until their password reaches 30 days old.

Also, can exceptions be made on individual user accounts by checking
"Password never expires" ?

Yes.

hth
DDS W 2k MVP MCSE

"Tom Glasser" <TomGlasser@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2E53B87F-7512-4961-AE9E-BE26A0A2C644@xxxxxxxxxxxxxxxx
We are about to implement a domain password policy on a network where
there was not one before. For password expiration, will every user's
password now expire on the same day?

Also, can exceptions be made on individual user accounts by checking
"Password never expires" ?

Thanks,
Tom


.



Relevant Pages

  • AD 2003 password expiration/complexity question
    ... if my domain policy says maximum password age is zero days (passwords never ... expire) and i change it to an arbitrary number, say 10, and all accounts are ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password Change
    ... Account Settings- Password Policy- We have the Maximum Password age set to ... thought it would expire on log in only. ... at logon has a certain "life expectancy" during the session which may be defined under the Kerberos Policy of the domain policy. ... some network resources like Exchange and ISA will periodically challenge the ...
    (microsoft.public.windows.server.active_directory)
  • password expiration
    ... >main site a child of that root. ... >getting a notice that their password was set to expire ... I went into the default domain policy of the ... >password age settings in the old domain. ...
    (microsoft.public.win2000.active_directory)
  • Re: AD 2003 password expiration/complexity question
    ... > if my domain policy says maximum password age is zero days (passwords ... expire) and i change it to an arbitrary number, say 10, and all accounts are ... complexity requirements will all users immediately have to change their ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password Expiration on 5.2
    ... dissemination or other use of, or taking of any action in reliance upon, this ... "Weeks between password EXPIRATION and LOCKOUT" means that after a password ... I am trying to setup all user to have their password expire every 30 ... retransmission, dissemination or other use of, or taking ...
    (AIX-L)