Re: Local Account & Password Policy Options Greyed out for Admins?

It sounds like the computer was never removed from the domain. Logon as an
administrator and go to Control Panel/system/computer name - change and
change the computer to workgroup giving it whatever name you want to use.
Reboot the computer and you should be able to change password policy in
Local Security Policy. I have never seen or heard of a user having to change
their password if their user account is configured for password never
expires. You can use the command net user username to see properties of a
user account. --- Steve


"Margaret Wilson" <twokatmew@xxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:Y7ydnReFl5D09VDenZ2dnUVZ_v2dnZ2d@xxxxxxxxxxxxxx
>I have a user who users her laptop and home, and it's forcing her to change
>passwords every 90 days, even though her account is set so the password
>should never expire. (Of course she's using local accounts and logging
>into the local machine.) When I ran a Windows domain, we had such a domain
>policy, but certain accounts were set so passwords never expired. Anyway,
>I looked at the laptop today, figuring I'd just use the Group Policy Editor
>to change to password expiration and lockout policies. Unfortunately these
>settings are greyed out for all three admin accounts on the machine. The
>domain that the laptop was originally used on no longer exists.
>
> I have the exact same laptop without this problem (originally used on the
> same domain), and I was hoping I could just replace the entire policy.
> But it's been a couple years since I did much with group policy, so I'm
> stumped on this one. The affected laptop has not been used or updated in
> a year, so it is maybe running WinXP Pro SP1, though it could have no
> service pack at all.
>
> I'm hoping I can fix this without having to reinstall the entire machine.
> Can anyone point advise me on this one?
>
> Thanks and Regards,
>
> Margaret


.

Relevant Pages

  • Re: Password expires for no apparent reason
    ... do not know if the policy was set and then cahnged to 'not defined'. ... the minimum password age is there to prevent users from blowing ... As Harj said Account lockouts could potentially be a problem as perhaps ... Password expires for no apparent reason ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password expires for no apparent reason
    ... policy that has set the values to what you see below meaning that users ... So I would define the password age and configure a value in there. ... As Harj said Account lockouts could potentially be a problem as perhaps ... Password expires for no apparent reason ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password expires for no apparent reason
    ... Run net accounts on the client machine to see what the settings are set ... Were any settings within any policy set at the domain level have any ... As Harj said Account lockouts could potentially be a problem as perhaps ... Password expires for no apparent reason ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password expires for no apparent reason
    ... Run net accounts on the client machine to see what the settings are set ... Were any settings within any policy set at the domain level have any ... As Harj said Account lockouts could potentially be a problem as perhaps ... Password expires for no apparent reason ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password aging
    ... We have many laptop users using VPN. ... When they first login to the laptop, they'll use the cached credentials, then they may login to VPN, if their password is set to expire, will they get a prompt to change password in a middle of a session? ... Your password change policy will take effect once the password has aged out and yes the local never expires will over for your service accounts. ...
    (microsoft.public.windows.server.active_directory)