+ Post New Thread
Results 1 to 14 of 14
How do you do....it? Thread, How to change Maximum Password Age through GPO in Technical; My server comes up with a message your password will expire in so many days would you like to change ...
  1. #1

    Join Date
    Jan 2008
    Posts
    9
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    How to change Maximum Password Age through GPO

    My server comes up with a message your password will expire in so many days would you like to change your password, after every 42 days. But I want to keep the same password. to acheive that I opened the GPO and under Password Policies I clicked on Maximum Password Age to disable it but it is grayed out and does not allow me to change anything. It must be something very simple please let me know how to disable the maximum password age through GPO.
    THANKS
    Last edited by shirzay; 15th January 2008 at 10:22 PM.

  2. #2
    mrforgetful's Avatar
    Join Date
    May 2006
    Posts
    1,634
    Thank Post
    7
    Thanked 15 Times in 15 Posts
    Rep Power
    22
    You will find policies for this here:

    Computer Config > Windows Settings > Security Settings > Account Policies > Password Policy

  3. #3

    elsiegee40's Avatar
    Join Date
    Jan 2007
    Location
    Kent
    Posts
    10,045
    Thank Post
    1,680
    Thanked 2,021 Times in 1,495 Posts
    Rep Power
    673
    Do you want to do this for everyone, or just you?

    In Active Directory, find your user; right click and go to properties; select the account tab and check "Password never expires"... that applies regardles of Group Policy

  4. #4
    Andie's Avatar
    Join Date
    Sep 2006
    Location
    Cambridgeshire
    Posts
    778
    Thank Post
    163
    Thanked 65 Times in 48 Posts
    Rep Power
    29
    Quote Originally Posted by mrforgetful View Post
    You will find policies for this here:

    Computer Config > Windows Settings > Security Settings > Account Policies > Password Policy
    I think @shirzay knows where to find it, but is saying it is grayed out and he can't change it. I have just checked my domain policy and I can edit it fine - no graying out. But I don't know enough about GPOs and their interdependencies to know why a GPOs setting would be grayed out. Perhaps there is another GPO higher up that overules the one @shirzay is trying to edit???

  5. #5
    mrforgetful's Avatar
    Join Date
    May 2006
    Posts
    1,634
    Thank Post
    7
    Thanked 15 Times in 15 Posts
    Rep Power
    22
    Oh yeh sorry, see this is why I have to read every word and can't skim through like most people!

    I've no idea why a policy would be grayed out. It would not matter if there was a setting higher up negating the option in a policy lower down, one would just get overridden.

  6. #6

    Join Date
    Mar 2007
    Posts
    1,669
    Thank Post
    72
    Thanked 249 Times in 199 Posts
    Rep Power
    64
    are you using an administrator account?

  7. #7

    Join Date
    Nov 2008
    Posts
    1
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Change password requirements for all users (Server 2003)

    If you want to change the password requirements (such as password age and complexity) for all users you do so through Administrative Tools. Look for Domain Security Policy and then Account Policies and then Password Policies. You should be able to make the changes from here and they will be reflected when you view them in the Group Policy window.

    Quote Originally Posted by shirzay View Post
    My server comes up with a message your password will expire in so many days would you like to change your password, after every 42 days. But I want to keep the same password. to acheive that I opened the GPO and under Password Policies I clicked on Maximum Password Age to disable it but it is grayed out and does not allow me to change anything. It must be something very simple please let me know how to disable the maximum password age through GPO.
    THANKS

  8. #8
    Jobos's Avatar
    Join Date
    Apr 2007
    Posts
    1,101
    Thank Post
    171
    Thanked 44 Times in 37 Posts
    Rep Power
    23
    Further to this. How do I enforce password age just for users in an OU? As I just want staff to change their passwords and not students who are in a different OU.

  9. #9
    mrforgetful's Avatar
    Join Date
    May 2006
    Posts
    1,634
    Thank Post
    7
    Thanked 15 Times in 15 Posts
    Rep Power
    22
    It's a machine setting, you could try using Loopback Processing but I'm not sure it will work very well.

  10. #10
    Andie's Avatar
    Join Date
    Sep 2006
    Location
    Cambridgeshire
    Posts
    778
    Thank Post
    163
    Thanked 65 Times in 48 Posts
    Rep Power
    29
    Quote Originally Posted by Jobos View Post
    Further to this. How do I enforce password age just for users in an OU? As I just want staff to change their passwords and not students who are in a different OU.
    Create separate policies for the different user groups (you may already have these - eg. Student Policy, Teacher policy, etc.), put the setting for password age in these, link the policies to the relevant OUs, then remove password age from the domain policy? Someone more experienced than me should be able to confirm this or tell you if I'm speaking rubbish!

  11. #11
    stormrider's Avatar
    Join Date
    Dec 2008
    Posts
    2
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Smile

    Quote Originally Posted by elsiegee40 View Post
    Do you want to do this for everyone, or just you?

    In Active Directory, find your user; right click and go to properties; select the account tab and check "Password never expires"... that applies regardles of Group Policy
    this guy is right i tried it and it worked do this.
    are you on a domain because domain setting override local settings.
    so your users or the users of the domain don't have there own settings
    on your domain.

    if not then sorry then its something else but that works if your on a domain

  12. #12

    powdarrmonkey's Avatar
    Join Date
    Feb 2008
    Location
    Alcester, Warwickshire
    Posts
    4,855
    Thank Post
    412
    Thanked 777 Times in 650 Posts
    Rep Power
    181
    Quote Originally Posted by Andie View Post
    Create separate policies for the different user groups (you may already have these - eg. Student Policy, Teacher policy, etc.), put the setting for password age in these, link the policies to the relevant OUs, then remove password age from the domain policy? Someone more experienced than me should be able to confirm this or tell you if I'm speaking rubbish!
    No, password policies are an exception to this unless you're using Server 2008. Anything else can only have one password policy per domain.

  13. #13

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,539
    Thank Post
    830
    Thanked 609 Times in 412 Posts
    Rep Power
    432
    You can have granular Password Policies (Ie Different OU's have different password Policies) with Windows 2008 IIRC..

  14. #14

    john's Avatar
    Join Date
    Sep 2005
    Location
    London
    Posts
    10,439
    Thank Post
    1,468
    Thanked 1,035 Times in 908 Posts
    Rep Power
    299
    Sorry to dig this one up, but has anyone actually got the separate 2008 Password Policies working? I'm trying to set my staff to change every 30 days (to meet LEA policy and my new AUP which was based on the LEA guidelines), and then want to have students at every 90 days (more due to us being short staffed so it will reduce the forgotten password calls about students). I've tried in a few places on 2008 to set them separate but no joy it only looks at the domain one, which I've set to 0 days etc thinking that would get over-ridden by the individual ones. I've enforced the policy but still no difference.

    Any thoughts, google seems to be throwing blanks and useless-ness at me and I dind't find anything coming up on here apart from lots of us saying its possible.

SHARE:
+ Post New Thread

Similar Threads

  1. Change Password Permissions
    By Jamie_a in forum Windows
    Replies: 6
    Last Post: 17th December 2007, 03:20 PM
  2. REALVNC - Mass password change?!?
    By Ben_Stanton in forum Windows
    Replies: 3
    Last Post: 20th September 2007, 10:18 AM
  3. Icon to Link to Change Password
    By BKGarry in forum Windows
    Replies: 3
    Last Post: 11th August 2007, 09:45 PM
  4. Unable to change password
    By danIT in forum Mac
    Replies: 5
    Last Post: 11th January 2007, 04:00 PM
  5. Replies: 8
    Last Post: 12th November 2006, 02:02 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •