Should 'Password never expires be ticked for users in AD'?

[edutech4schools]

Just setting up complex passwords at a primary school and noticed all the users have 'Password never expires' ticked in AD.

 

Would complex passwords override this setting? or should I un-tick this box?

 

Thanks

[DalekSec]

We have it un-ticked, the complex passwords as far as i'm aware is overridden by this.

 

Keep it unticked! Unless obviously you don't want passwords to expire.

[EvLPhenom]

We only have this ticked for Primary age children. It becomes a constant battle of forgotten passwords otherwise. All staff have it unticked and are asked to change it every 3 months within the password group policy.

[edutech4schools]

Thanks

[Oaktech]

We have complex password policies for all staff and 'service' accounts. All the accounts expire except very specific ones such as the master domain admin and various ldap binding accounts.

 

Students don't have complex passwords and don't expire although they cant reuse and they are reset at the start of term.

[ITGURU]

Both, Password never expires and user cannot change password is ticked for all our users.

If they need to change their password they come to us.

 

If unticked, it would students that know each others password to log someone else on, change their password, then the original student wouldn't be able to login.

[3s-gtech]

Is that really enough of an issue to prevent anyone changing their password themselves?

[ITGURU]

Yes, because we don't really get many users that need to change their password, which is why we don't have a policy set to change every 30 days etc.

[Lonix]

Just setting up complex passwords at a primary school and noticed all the users have 'Password never expires' ticked in AD.

Would complex passwords override this setting? or should I un-tick this box?

Thanks

 

Can I just add, we use SIMs Learning Gateway... the password complex level is high and they expire. When you have 1600 Students and each of the Parents with SLG passwords, we are effectively resetting them a lot......

 

Even for my self having to come up with a new complex password is bad enough (when I have dozens of my own and work ones to remember!).... so how do the kids feel....

 

It's a nightmare.