where is "Maximum Password Age" stored?

[craigrm2005]

Sorry, I've got a bit of an odd question.
I'm in a corporate/domain managed environment, but am looking to
perform an independent verification of some password settings.
Does the "Maximum Password Age" value reside in a reg key in such an
environment on the end user's machine?
If not, where does group policy info get stored on the end user
machine, in the event that the computer is not on the network when the
user logs in?

Thanks for any help.

Craig

 

[Guest]

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
maximumpasswordage REG_DWORD

This is the location on a standalone machine that is not part of a domain.

 

[craigrm2005]

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
maximumpasswordage REG_DWORD

This is the location on a standalone machine that is not part of a domain.

--
John Hensleywww.resqware.com







- Show quoted text -

Thanks, I'm wondering if anyone might know how "Maximum Password Age"
is stored on the end user machine when it is part of a domain.
Is it in reg keys, or some special file?
Presumably this info is stored on the machine in some way, for
situations when it's offline.

 

[Guest]

Its stored in several locations. The key is repeated in the copies of the
control sets stored in the registry.
HKLM\System\CurrentControlSet\Services\Netlogon\Parameters\MaximumPasswordAge.
The key will be repeated in any of the other copies of the control set on
the machine.
You could also use the RSoP MMC plugin to run on a machine which will
display the information graphically. The Max Password Age is in Computer
Configuration\ Windows settings\Security settings\Account Policies\Password
Policy
The command line utility gpresult will also give you the information if you
use the /v or /z switches, and it will show the policy that applied the
setting and the last time the policy was applied.