Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is there a way to configure active directory so that when a user changes their password their previous password will work for a few hours? Basically want to have a grace period during a password change where both the old and new password will work.

share|improve this question
    
would prefer not to hack the registry but this looks promising support.microsoft.com/kb/906305 –  vinnyjames Jan 14 '11 at 18:57
    
What would be the reason for needing this? The password change is going to bite at some point, so is it not better to have a short pain? Also, be wary of this little sentence in the kb article you linked to: "Existing components that are designed to use Kerberos for authentication are not affected by this change."... –  DutchUncle Jan 14 '11 at 19:00
1  
"The extension of the password lifetime period applies only to network access by using NTLM. Interactive logon behavior is unchanged." Not that promising :P –  JamesRyan Jan 14 '11 at 19:38
    
@JR: Absolutely. Which is why I posted my answer. It sounds to me like the OP wants users to be able to log on with both passwords, which isn't possible that I'm aware of. –  joeqwerty Jan 15 '11 at 15:03
    
that seems very ... wrong :-| –  warren Aug 31 '11 at 0:34
show 1 more comment

2 Answers

No............................

share|improve this answer
add comment
up vote 1 down vote accepted

this registry change worked for me http://support.microsoft.com/kb/906305

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.