Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

On a Windows Server 2008 R2 AD, if you uncheck the account option "Password never expires" on a User Account, does the password expire instantly, or does it get set to the period defined in the Password Policy?

share|improve this question

1 Answer 1

up vote 4 down vote accepted

The expiration date should be inherited from the domain's policy. The last password modification date is being stored in the attribute pwdLastSet

So if you uncheck the box there's a slight chance that this user's password is older then your policy defines. Therefore the password might expire.

But you can check password expiration with

net user username

Edit: I think I just found the solution you are looking for. Just set pwdLastSet to -1 and it will store today's date.

Source with a decent VBS script: http://stackoverflow.com/questions/5556806/change-password-expiration-date-in-active-directory-using-vbs

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.