Question user account password never expire in Win 11 Home

nbkin

Commendable
Aug 31, 2022
11
0
1,510
Hi,

please are there commands for Command Prompt (or Power Shell) to set the password property of a local account to never expire that are being supported in Win 11 Home? By searching I only found commands around creating an account and changing its properties which are not supported in Win 11 Home.

I also found that Users are not in the Management Console and lusrmgr.msc is not supported either. It is possible to create accounts using the basic Control Panel possibilities, but the property of a permanent password is not included there.

I hesitate to use a third-party alternative lusrmgr.exe, maybe I should not...

Thanks so much.
 
What user rights do you have?

You will need to have full admin rights to the PC in question.

Also: why the requirement for permanent password?

Passwords should be changed just as a matter of security.
 
What user rights do you have?

You will need to have full admin rights to the PC in question.

Also: why the requirement for permanent password?

Passwords should be changed just as a matter of security.

Thanks for asking.
I have got access to the admin account of the laptop in question and can create new (types of) (local) accounts.
If you do not like permanent passwords, then just imagine my question was going the opposite direction, a command for Win 11 Home to change the password not to be permanent.
Anyway, I am interested in the command or some way (other than lusrmgr.exe) which would work with Win 11 Home, because the internet is full of pieces of advice with commands that are ok for Win 10 or Win 11 Pro and that does not help me out.
Thanks.
 
Indeed.

After some experimenting and poking about via

Get-LocalUser | Format-List
revealed that some accounts had no expiration date at all.

But there were was one that had nonsense dates: e.g. 6+ years ago and linked to some Windows Defender account/utility. No idea....

AccountExpires :
Description : A user account managed and used by the system for Windows Defender Application Guard
scenarios.
Enabled : False
FullName :
PasswordChangeableDate : 10/2/2018 2:17:18 AM
PasswordExpires : 11/13/2018 1:17:18 AM
UserMayChangePassword : True
PasswordRequired : True
PasswordLastSet : 10/2/2018 2:17:18 AM
LastLogon :
Name : WDAGUtilityAccount
SID : S-1-5-21-1577051677-2174798182-290312275-504
PrincipalSource : Local
ObjectClass : User


@nbkin

My thought is to simply check the user account expiration dates via the cmdlet.

If no expiration date is listed then the matter is likely moot.

However, you still have (or so it appears to me) the option to ensure that no expiration date can be set.
 
Thanks so much for all the posts.

I asked because of someone else laptop of which I take care from time to time. (Win 11 Home was not really their choice either.)

As I have not got access to that laptop all the time, I just wanted to take care of this for the case the user would be prompted to reset the password after some 40 something days.

I run the basic command and at least I can say that there was no error message (as with the afore mentioned commands I googled before). I also can say that the verification command yields the same response with both the Win 11 Home laptop and another Win 10 Pro laptop where the setting was adjusted before using the lusrmgr.msc GUI. It is beyond my knowledge to dive further into that for now.
 
Last edited:
Someone had to set that expiration period. And that usually only happen in the context of a corporate OS. Not consumer.
Thank you for the remarks about the default behavior.
On my part the question was simply because of lack of knowledge, plus experience in the past with corporate, refurbished etc. laptops. Setting up myself is already some sort of personal progress. Far below the audience here.