Re: Implementing a Password Policy

Just to add to what Danny said once the policy is in place by default users
should get a warning within 14 days of password expiration warning them
about impending expiration. Hopefully all users will not wait until the last
day and should be trained not to. There is a free tool called dumpsec from
Somarsoft that can help you determine password ages in a report and do a
whole lot more. At first implementation you may experience mass expiration
of user passwords so this is something that needs to be communicated to
users well in advance with suggestions to change their password ahead of the
change date or your support group could get flooded with calls from confused
users. --- Steve

http://www.somarsoft.com/

"Tom Glasser" <TomGlasser@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2E53B87F-7512-4961-AE9E-BE26A0A2C644@xxxxxxxxxxxxxxxx
We are about to implement a domain password policy on a network where
there was not one before. For password expiration, will every user's
password now expire on the same day?

Also, can exceptions be made on individual user accounts by checking
"Password never expires" ?

Thanks,
Tom


.

Relevant Pages

  • RE: active directory password policy
    ... Password Expiration Warning Application: ... It runs on a nightly basis and sends out messages when passwords are ... Subject: active directory password policy ...
    (Focus-Microsoft)
  • Re: Password never expires-cant force user to change password
    ... Password policy on the domain for domain users is all or nothing. ... You want to implement a new password expiration policy. ... > Expire your departments manually. ... I'm just not a very good script writer and am not very confident. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Active Directory Expiration Notification
    ... a map of all attributes that can be set via the policy files agaiinst the ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... message to the user that their password is about to expire. ... Password expiration is determined by the domain password expiration ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain account policy
    ... this could expire most users. ... The password expiration is calculated by comparing the policy to the ... password last changed date + maximum password age. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password Policy Enforcement Question
    ... time they try to change their Password (regarding to complexity option). ... For example if you change the password expiration to 60 days, ... implement the policy. ... could expire most users. ...
    (microsoft.public.windows.server.active_directory)