General discussion

Locked

Enable password policy on domain

By certboy21 ·
Hi,

my current AD enviro is does not have a password policy in place. I intend to create a 60-day password GPO and link it to the domain container. But by doing so, all user accounts will face password expiration the next day as they have been using the same password for quite some time.

Is there any way to enable password GPO without having the users's pwd expire the next day? The countdown should start from 0 the moment I link this GPO and not expire the user's password immediately.

I know of AD tools but unsure of which one to use and which particular value to look for to reset. Advice greatly appreciated!

This conversation is currently closed to new comments.

14 total posts (Page 1 of 2)   01 | 02   Next
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by Blowtoad In reply to Enable password policy on ...

The easiest way to do what you are asking is to announce the nwe policy today. Then, in 60 days, link the GPO.

Collapse -

by certboy21 In reply to

Poster rated this answer.

Collapse -

by certboy21 In reply to

Poster rated this answer.

Collapse -

by curlergirl In reply to Enable password policy on ...

You have to set some sort of "starting point" one way or the other. You can either start as of the current day, as suggested by the previous post, and implement your GPO 60 days from now, and tell people they will have to change their password in 60 days, or you can warn everyone "As of X date, we are implementing a new password policy. You will be required to change your password the first time you log on after X date and every 60 days after that."

Personally, I would do the latter - it gets them to change their password that they've been using for the past months or years immediately, and then warns them that this will be a recurring thing that will happen on a regular basis.

Collapse -

by curlergirl In reply to

Sorry - I guess I didn't really respond to the crux of your question - I do not know of a 3rd party policy or tool that you could use to do what you want.

Collapse -

by certboy21 In reply to

Poster rated this answer.

Collapse -

by certboy21 In reply to

Poster rated this answer.

Collapse -

by CG IT In reply to Enable password policy on ...

Is this using Windows 2000 server DCs or Windows 2003 server DCs?

There are differences in how W2K and W2003 work.

Collapse -

by certboy21 In reply to

Poster rated this answer.

Collapse -

by certboy21 In reply to

Poster rated this answer.

Back to Windows Forum
14 total posts (Page 1 of 2)   01 | 02   Next

Related Discussions

Related Forums