up vote 2 down vote favorite
1
share [g+] share [fb]

Is there a way to configure active directory so that when a user changes their password their previous password will work for a few hours? Basically want to have a grace period during a password change where both the old and new password will work.

link|improve this question
would prefer not to hack the registry but this looks promising support.microsoft.com/kb/906305 – vinnyjames Jan 14 '11 at 18:57
What would be the reason for needing this? The password change is going to bite at some point, so is it not better to have a short pain? Also, be wary of this little sentence in the kb article you linked to: "Existing components that are designed to use Kerberos for authentication are not affected by this change."... – UnisoftDesign Jan 14 '11 at 19:00
1  
"The extension of the password lifetime period applies only to network access by using NTLM. Interactive logon behavior is unchanged." Not that promising :P – JamesRyan Jan 14 '11 at 19:38
@JR: Absolutely. Which is why I posted my answer. It sounds to me like the OP wants users to be able to log on with both passwords, which isn't possible that I'm aware of. – joeqwerty Jan 15 '11 at 15:03
that seems very ... wrong :-| – warren Aug 31 '11 at 0:34
show 1 more comment
feedback

2 Answers

up vote 6 down vote

No............................

link|improve this answer
feedback
up vote 1 down vote accepted

this registry change worked for me http://support.microsoft.com/kb/906305

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.