password policy

[Guest]

I enabled a group policy to force users to change their passwords every 180
days. Management asked me to disable the policy so I did. Users are still
prompted every 180 days to change their passwords. I disabled the policy at
the OU level and at the domain level. What am I missing?

 

[Steven L Umbach]

You have to disable or change the policy at the domain level for domain
users. Never "undefine" a password policy setting. Always set it to exactly
what you want. Often a setting of zero will disable the policy if there is
not specific enable/disable option. After you are done either wait at least
five minutes or use secedit to refresh security policy on the domain
controller and run the command net accounts to see the new effective
passwrods policy. --- Steve

 

[Guest]

There is not an option to disable the policy. There is only an option to
undefine.

 

[Steven L Umbach]

Set it to zero and it should then say "password will not expire" above the
box that shows the number of days. --- Steve