Passwords expiring despite policies not enforcing expiration

[mb2k01]

Hi All,

 

Bit of a strange one here which I'm hoping I might be able to get some help on.

 

We have a strange intermittent problem where users are reporting their passwords have expired / are not working.

Initially we had a password expiration policy but we altered this a good month or two ago and have gpupdate on the DC etc.

 

The issue seems to be more prominent for OWA users and/or RDWeb users (that may just be coincidence or me dreaming it!)

 

I'm interested to know what else you think this could be?

 

If it helps, the set up here is: Windows Server 2008R2 on all servers including RDS, Win 7, Exchange 2010

[Killer_Bot]

Are there any PSO's being applied to particular users that are overriding your default domain password policy? If not have you actually seen the expiration error? I only ask as I get staff/students coming to me all the time saying my passwords not working anymore and half the time they've either forgot it or typing it in wrong.

 

We use OWA and have never had an issue with passwords expiring so can't think why that would be a problem, we don't use RDP for Staff though so whether any security policies are setup when you add that role I'm not sure.

 

Post back if you figure out what it is though

[mb2k01]

Sadly never seen the error itself, or managed to get anyone to give me a grab of it.

Students password issues are taken with a hefty pinch of salt, but this issue has happened to various misc staff / smt / governor accounts. All very odd.

[morganw]

When I implemented password policies I used this:

 

Product Documentation | Specops Password Policy Basic

 

It's free and as well as configuring the policies I believe you can also select a user and see which policies are applying. May be useful.