Will changing the user password rules initiate an instant request to change passwords

[TwistedHelixis]

I would like to change our password rules from a min of 8 characters to min 10 and also remove the password request of change from every 6 months to 'never ask the user to change their password' on our Windows domain.

 

If I make those changes do the users get requested to update their passwords with the new changes instantly / never or at someone point later?

 

EDIT - We are currently using Fine Grained Password Policy to control staff passwords.

Edited March 11, 2021 by TwistedHelixis

[TriggerHappyUK]

Can't you just highlight all your users in AD - Right click - Properties - Check 'User must change password at next logon' then after a week do the same but check the box for 'Password never expires'

[TwistedHelixis]

Can't you just highlight all your users in AD - Right click - Properties - Check 'User must change password at next logon' then after a week do the same but check the box for 'Password never expires'

 

Should have mentioned, we are using Fine Grained Password Policy, so this might override what you have suggested.

[Rob_D]

We use FGPP and the AD "user must change..." and "password never expires" checkboxes still work as expected.

 

If it does cause problems it's likely to be the "never ask to change"/"don't expire" setting in FGPP that conflicts with "user must change...", so you could increase the restrictions and expire everyone's passwords with "user must change" in AD, and once they're all changed then go back an set "never ask to change" in FGPP.

[TwistedHelixis]

We use FGPP and the AD "user must change..." and "password never expires" checkboxes still work as expected.

 

If it does cause problems it's likely to be the "never ask to change"/"don't expire" setting in FGPP that conflicts with "user must change...", so you could increase the restrictions and expire everyone's passwords with "user must change" in AD, and once they're all changed then go back an set "never ask to change" in FGPP.

 

Thanks, thanks very helpful to know the AD settings can still be used, I just assumed they would be ignored with FGPP enabled.