Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » when will password policy effect?
when will password policy effect? [message #159262] Mon, 27 July 2009 23:49 Go to next message
Evren Sevilmis  is currently offline Evren Sevilmis  Turkey
Messages: 12
Registered: July 2009
Junior Member
we plan to set password policy which has not been set before. When I
set minimum password length to 8 today, tomorrow morning will all the passwords
expire or AD will start to count down from today?
RE: when will password policy effect? [message #159264 is a reply to message #159262] Tue, 28 July 2009 01:53 Go to previous messageGo to next message
Joe Dunn  is currently offline Joe Dunn
Messages: 36
Registered: July 2009
Member
The new password length will only be enforced the next time the users change
their passwords. Changing it will not automatically expire passwords, even
if they are shorter than your new limit.

If you were changing the maximum password age then this could expire the
passwords immediately. Depending on whether the current password age was
greater or less than the new value.

If you did want to immediately enforce your changes you would need to set
all the user account passwords to expire manually. To do this you could use
DSMOD USER with the -mustchpwd command. Or a vbscript or similiar.

Best Regards
Joe Dunn
MCSE, MCTS, CCNA





"Evren Sevilmis" wrote:

>
> we plan to set password policy which has not been set before. When I
> set minimum password length to 8 today, tomorrow morning will all the passwords
> expire or AD will start to count down from today?
>
>
>
Re: when will password policy effect? [message #159266 is a reply to message #159262] Tue, 28 July 2009 03:12 Go to previous messageGo to next message
florian  is currently offline florian  Switzerland
Messages: 484
Registered: July 2009
Senior Member
Howdie!

Evren Sevilmis wrote:
> we plan to set password policy which has not been set before. When I
> set minimum password length to 8 today, tomorrow morning will all the
> passwords expire or AD will start to count down from today?

Joe is correct. Changing the password length policy will not trigger an
immediage expiry of all passwords. Users simply have to choose
longer/shorter passwords accroding to the new plicy the next time they
change their passwords.

If you're going to change the maximum password age and modify it to be a
shorter time period (say from 200 days to 180 days), passwords that are
older than 180 days (but would have been "valid" for the 200days-policy
before) will expire and users need to change them.

Cheers,
Florian
Re: when will password policy effect? [message #159269 is a reply to message #159262] Tue, 28 July 2009 03:58 Go to previous messageGo to next message
Jorge Silva  is currently offline Jorge Silva
Messages: 398
Registered: July 2009
Senior Member
Hi
As others said, next time the users change their passwords.

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services
"Evren Sevilmis" <seth@gonca.net> wrote in message
news:45e86f3c1a88a8cbdd77640618fd@msnews.microsoft.com...
>
> we plan to set password policy which has not been set before. When I
> set minimum password length to 8 today, tomorrow morning will all the
> passwords expire or AD will start to count down from today?
>
>
Re: when will password policy effect? [message #159277 is a reply to message #159262] Tue, 28 July 2009 05:15 Go to previous message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello Evren,

It comes into effect when the user changes there password the next time as
already stated from the others.

So if you have 90 days for example for expiring of passwords and a user has
changed it before 30 days, the user has to wait 60 days for the new policy
going in effect or the user does changing it before manual. If you need it
faster you have force the password change manual on the user account properties
or with a script.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> we plan to set password policy which has not been set before. When
> I set minimum password length to 8 today, tomorrow morning will all
> the passwords expire or AD will start to count down from today?
>
Previous Topic:Replication between intersite and intrasite
Next Topic:What is KRB_AP_ERR_MODIFIED?
Goto Forum:
  


Current Time: Fri Jan 19 00:45:49 MST 2018

Total time taken to generate the page: 0.03058 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software