PWD never expires

Discussion in 'Active Directory' started by best, Feb 22, 2007.

  1. best

    best Guest

    Hello Everyone

    Windows 2003

    In AD, if you leave "Password never expires" untick, what does this mean ?

    Does this mean it will exipre after a certain period of time ? If so, how
    long ?

    Many thanks

    best, Feb 22, 2007
    1. Advertisements

  2. That means the password will adhere to the account policies. If you have not
    set up account policies I don't think it will do anything.

    Danny Sanders, Feb 22, 2007
    1. Advertisements

  3. best

    Tony Murray Guest

    The default setting for "Maximum password age" is, I believe, 42 days, so
    unless this has been changed it should apply.

    Theoretically, you could set the value to zero (i.e. no password expiry),
    but I don't know of any organisation that would contemplate this. :)

    Tony Murray, Feb 23, 2007
  4. best

    Jorge Silva Guest

    Depends on your Password policy defined at the domain level.
    run RSoP.msc from cmd and you will find out.


    I hope that the information above helps you.
    Have a Nice day.
    Jorge Silva
    Jorge Silva, Feb 23, 2007
  5. Running RSoP might not be accurate, as that will show the policy that
    applies to the local SAM. Either run it on a DC (preferably the PDCe), or
    check the maxPwdAge attribute of the domain NC. The former is probably
    easier, as you need to convert the integer value of maxPwdAge into time
    format, but the most accurate value is that of maxPwdAge.
    Paul Williams [MVP], Feb 23, 2007
  6. best

    Jorge Silva Guest

    Ops, I forgot to say to run it from the DC.


    I hope that the information above helps you.
    Have a Nice day.
    Jorge Silva
    Jorge Silva, Feb 23, 2007
  7. Hi Best,

    Thanks to everyone for their key in.

    I'd like to summarize everyone's reply:
    After clear the "Password never expires" option, the account password will
    expire after a period of time. The time is decided by the password policy
    setting which can be seen from "rsop.msc" on DC.

    I hope the information above can address your concerns. If anything is
    unclear, please feel free to let us know.

    Sean Cai, MCSE2000
    Microsoft Online Support

    Get Secure! -
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    Sean Cai [MSFT], Feb 25, 2007
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.