Password Age policy Suspend

[digitaldomain12]

This school year we implemented a password restriction policy. Part of the policy states that users must change their passwords every 90 days. With summer break coming up, which is roughly 3 months, we are worried that many accounts will be locked out during that time. What would happen if we changed the max password age to 0 on the last day, then changed it back to 90 towards the end of summer?

[glennda]

Best bet is to bulk change users "Password does not expire" property and then at the end of the summer - bulk untick it.

[digitaldomain12]

Does setting that reset the password age property on the account? SO when I untick will they all be expired at the end of the summer?

[carvjo]

This school year we implemented a password restriction policy. Part of the policy states that users must change their passwords every 90 days. With summer break coming up, which is roughly 3 months, we are worried that many accounts will be locked out during that time. What would happen if we changed the max password age to 0 on the last day, then changed it back to 90 towards the end of summer?

 

Those that have not changed their password within the last 90 days will locked-out..

 

(or at least that is what happened when I tried this!)

[digitaldomain12]

Those that have not changed their password within the last 90 days will locked-out..

 

(or at least that is what happened when I tried this!)

 

What if I change the max password age value from 90 days to 180 days? And then reducing the value when people return to say 90 days again.

 

Would this work better than having to bulk set to "password does not expire" method?

[glennda]

Does setting that reset the password age property on the account? SO when I untick will they all be expired at the end of the summer?

 

I'm not 100% sure - I presume so