Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a way to configure active directory so that when a user changes their password their previous password will work for a few hours? Basically want to have a grace period during a password change where both the old and new password will work.

share|improve this question
would prefer not to hack the registry but this looks promising – vinnyjames Jan 14 '11 at 18:57
What would be the reason for needing this? The password change is going to bite at some point, so is it not better to have a short pain? Also, be wary of this little sentence in the kb article you linked to: "Existing components that are designed to use Kerberos for authentication are not affected by this change."... – DutchUncle Jan 14 '11 at 19:00
"The extension of the password lifetime period applies only to network access by using NTLM. Interactive logon behavior is unchanged." Not that promising :P – JamesRyan Jan 14 '11 at 19:38
@JR: Absolutely. Which is why I posted my answer. It sounds to me like the OP wants users to be able to log on with both passwords, which isn't possible that I'm aware of. – joeqwerty Jan 15 '11 at 15:03
that seems very ... wrong :-| – warren Aug 31 '11 at 0:34


share|improve this answer
up vote 1 down vote accepted

this registry change worked for me

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.