none
Password policy

    Question

  • Hi All,

    I am facing an odd issue, under GPO, password policy, all policies were not defined.

    but somehow some users got prompted "your password will expire in ..." not all users, and randomly. I checked local GPO and server nothing suspicious. 

    Any help would be great. Thanks

    Regards

    Thursday, June 13, 2013 2:09 AM

Answers

All replies

  • I am facing an odd issue, under GPO, password policy, all policies were not defined.

    Which GPO are you referring here ?  Default Domain Policy ?


    Regards, Santosh

    I do not represent the organisation I work for, all the opinions expressed here, are my own.

    This posting is provided AS IS with no warranties or guarantees and confers no rights.

    Blog | Wiki

    Thursday, June 13, 2013 4:35 AM
    Moderator
  • I checked all GPOs including the Default Domain Policy. 

    None of them was defined or enable.

    Regards,

    Friday, June 14, 2013 1:12 AM
  • Hello,

    there is a default setting that is applied and also for the reminder the default is 14 days. Check the settings for each value in http://technet.microsoft.com/en-us/library/cc783512(v=ws.10).aspx


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    Friday, June 14, 2013 8:28 AM
  • Hi Meinolf,

    thank you for your help always. 

    As I mentioned earlier, I cannot seem to find any policy that forced users to change password. 

    Today more users called to say password has expired.

    I really don't know where to start troubleshooting on password policy.

    DC01: Windows server 2003.

    DC02: Windows server 2003.

    Thanks in advance

    Regards

    Monday, June 17, 2013 12:49 AM
  • Hi Meinolf,

    I should let you know that recently we installed an Exchange Server 2010 Hybrid environment. All of a sudden, many users have got a prompt to change password on the same day, one of CEO said he has never got prompted to change password for long time which is not a good thing. The issue is puzzling me. I cannot find what is causing/ triggering password policy.

    Regards

    Tuesday, June 18, 2013 11:03 AM
  • Hello,

    please upload the following file to Windows Sky drive and post the link to it here:

    gpresult /h GPO-Report.html

    Also i would like to see a screen shot from the default domain policy passsword policysettings and the account lockout settings, take 2 snapshots, one each and upload them also to Windows Sky drive.


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    Tuesday, June 18, 2013 11:51 AM
  • Hi Meinolf

    Please give me your Windows Sky Drive. Thanks 

    I think you missed upload Link

    Regards

    Wednesday, June 19, 2013 1:53 AM
  • Hello,

    it is YOUR Windows Sky drive to upload and then add the link here. With your Microsoft account you can just use skydrive.live.com


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    Wednesday, June 19, 2013 7:21 AM
  • Hi 

    Sorry for misunderstanding.

    With the 2 screen shots you can see from here http://sdrv.ms/14jEyGE

    With the GPRESULT, I cannot run with /H on Wins server 2003 Domain Controller since there is no /H argument or option (ERROR: Invalid argument/option - '/H'.), but I can run it on my PC Wins 7 and or Wins server 2008 (not a DC). Due to privacy I cannot put in the Sky Drive. 

    I can send you the shared link if you like. Thanks for understanding.

    Regards

    Thursday, June 20, 2013 1:03 AM