Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 0 down vote favorite

Let's say I have a group policy that sets the maximum password age at 90 days. Some user doesn't change their password for 91 days, so their password should be expired.

If I then remove that group policy to make the max password age not defined, will that account still be expired? In other words, when that user logs in again, should they still be required to change their password?

I would think not, but I seem to be observing the exact opposite behavior on our domain controller; that is, after I change the group policy setting and login with an account whose password had expired, I still get prompts about it.

Does anyone know for sure either way, or is there something else I'm missing?

share|improve this question

1 Answer

up vote 2 down vote accepted

Once a password is expired that is it. They will be prompted to change it. Even if you change the group policy. The reason is because the account has a flag get set that says "change password on next login"

You could go into the User & Groups Manager and set the user back to not expired password.

share|improve this answer
Do you mean the checkbox in the AD User Manager that says "user must change password at next login" gets checked? Or do you mean some kind of internal flag? – Nalandial Jun 17 '09 at 1:56
1  
What would happen if you checked the "Password never expires flag". Never have tested this, but thought I would throw it out there. – Matt Jun 17 '09 at 2:33
That actually worked. I checked that box, applied the changes, then unchecked the box and was no longer being prompted to change the password upon login. I guess it cleared whatever internal flag AD had set. – Nalandial Jun 17 '09 at 3:03

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.