How to set msDS-MaximumPasswordAge to Password never expires with PowerShell


  • I am trying to set the "msDS-MaximumPasswordAge" to "Password never expires" by PowerShell. Actually this is done with a command like this:

    New-ADFineGrainedPasswordPolicy ... -MaxPasswordAge "365.00:00:00"

    In this example the passwords would expire after 365 days, but I want it to never expire.

    If I configure this policy with adsiedit.msc, I can use the term "(never)" successfully. The same is true for LDIF-Import, where the promising value is "-9223372036854775808" (I8-Format).

    I cannot find any helpfile or other source where the wanted value is mentioned. If I analyse a configured PSO (with the desired value already set) with "Get-ADFineGrainedPasswordPolicy" the returned value is "00:00:00", but it's not possible to set this value. At least: I am not able to do it successfully.

    Thanks in Advance, T.

    (Sorry for the crosspost, but I could not get a complete answer yet.)

    Thursday, October 14, 2010 5:39 PM