Password expiry reminder policy

Brad

Distinguished
Dec 31, 2007
497
0
18,780
Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi all,
I have set up a GPO on a W2K DC.The GPO has a minimum password history of 24 days and a maximum history of 30 days. This allows only 6 days in which the user can change there password. The problem I have is that when the user logs on they get a reminder up to 14 days in advance that there passwords will expire and need changing. How can I change this reminder so it only appears when thet only have six days left
Thanks
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.group_policy (More info?)

why make the minimum password history so long. I set it so the user can't
change the password to the same password they just had, but setting a long
minimum history isn't advantagous as far as I can tell. How does a user
change his/her password if he/she feels it is compromised. I always tell my
users to change it instantly if they feel that their password is
compromised.

--
Robert Cohen
A legend in his own mind
--

"Brad" <anonymous@discussions.microsoft.com> wrote in message
news:DA701E48-DF02-4FCD-ABBD-6227853507C3@microsoft.com...
> Hi all,
> I have set up a GPO on a W2K DC.The GPO has a minimum password history of
24 days and a maximum history of 30 days. This allows only 6 days in which
the user can change there password. The problem I have is that when the user
logs on they get a reminder up to 14 days in advance that there passwords
will expire and need changing. How can I change this reminder so it only
appears when thet only have six days left
> Thanks
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.group_policy (More info?)

That is kind of a stiff minimum history but to answer your question, you change that
setting in Domain Security Policy/security settings/local policies/security options -
prompt user to change password before expiring. --- Steve

"Brad" <anonymous@discussions.microsoft.com> wrote in message
news:DA701E48-DF02-4FCD-ABBD-6227853507C3@microsoft.com...
> Hi all,
> I have set up a GPO on a W2K DC.The GPO has a minimum password history of 24 days
and a maximum history of 30 days. This allows only 6 days in which the user can
change there password. The problem I have is that when the user logs on they get a
reminder up to 14 days in advance that there passwords will expire and need changing.
How can I change this reminder so it only appears when thet only have six days left
> Thanks