Password change notification

[Guest]

Archived from groups: microsoft.public.windowsnt.domain (More info?)

Hi.

I have an mixed mode windows 2000 domain with Windows NT
4.0 workstation.

My question is: 14 days before password expires the user
gets the change password notification message. I want to
set the message to appere 5 days befor expiration. I know
that on NT I have to do this with registry-setting, or on
W2K I can set this in Default domain policy. My question
is: If I use the Defalut domain policy i AD and set this
to 5 days, will this take effect om my NT workstation or
do I have to use the registrysetting? I have also one
question about security. If I set the notification down
to 5 days, will this compromise my security in any known
ways? Is there any problems with users who are away and
not able to reset their account - will this account then
be expired?

Thank You.

 

[Guest]

Archived from groups: microsoft.public.windowsnt.domain (More info?)

Any group policy settings (including the default domain policy) does not
affect clients that came out before Win 2k.
Your security comes form the fact that you are changing the password
periodically not from how long in advance you are notified about the need to
change the password.


hth
DDS W 2k MVP MCSE

"MissM" <anonymous@discussions.microsoft.com> wrote in message
news:120ac01c4426f$a8606830$a601280a@phx.gbl...
> Hi.
>
> I have an mixed mode windows 2000 domain with Windows NT
> 4.0 workstation.
>
> My question is: 14 days before password expires the user
> gets the change password notification message. I want to
> set the message to appere 5 days befor expiration. I know
> that on NT I have to do this with registry-setting, or on
> W2K I can set this in Default domain policy. My question
> is: If I use the Defalut domain policy i AD and set this
> to 5 days, will this take effect om my NT workstation or
> do I have to use the registrysetting? I have also one
> question about security. If I set the notification down
> to 5 days, will this compromise my security in any known
> ways? Is there any problems with users who are away and
> not able to reset their account - will this account then
> be expired?
>
> Thank You.
>
>

 

[Guest]

Archived from groups: microsoft.public.windowsnt.domain (More info?)

First of all yes you'll have to edit the registry on the NT client
machines. W2k or higher will use the GP.

14 Day Password Change Notification Cannot Be Changed
http://support.microsoft.com/default.aspx?scid=kb;en-us;135403

As far as comprimise I don't see how. I think the problem may
arise when a person may be out of the office for more than five days
and the password expires before they get the notice.

"MissM" <anonymous@discussions.microsoft.com> wrote in message
> I have an mixed mode windows 2000 domain with Windows NT
> 4.0 workstation.
>
> My question is: 14 days before password expires the user
> gets the change password notification message. I want to
> set the message to appere 5 days befor expiration. I know
> that on NT I have to do this with registry-setting, or on
> W2K I can set this in Default domain policy. My question
> is: If I use the Defalut domain policy i AD and set this
> to 5 days, will this take effect om my NT workstation or
> do I have to use the registrysetting? I have also one
> question about security. If I set the notification down
> to 5 days, will this compromise my security in any known
> ways? Is there any problems with users who are away and
> not able to reset their account - will this account then
> be expired?
>
> Thank You.
>
>