Grace Login Count?

[Brian Rodeck]

Is there a GPO setting that specifies how many "grace logins" you get when
your password is expired, before your account is locked?

TIA for your help!

 

[Jimmy Andersson]

If the password is expired your out of the network. Password expiration is
based on time.

Regards,
/Jimmy

 

[Brian Rodeck]

Thanks for the quick reply.

What I'm getting at is when I expire passwords, thereby forcing users to
change their passwords. I think they get 3 grace logins to change their
passwords - is this true?

Is this "grace login" setting chanheable in a GPO?

Thanks for your help!

 

[Jimmy Andersson]

I'm not sure I understand what you're meaning with grace logins. If you set
the Account Expires it will expire by the end of that date. Or do I miss
something....?

Regards,
/Jimmy

 

[Brian Rodeck]

Maybe I'm confusing Microsoft with Novell, but in AD Users and Computers I
can set a user account to "change password at next Login".

I thought that you could elect to "not" change the password immediately, but
you had to get it done by the third login. If you didn't, your account is
locked.

So anyway, this may just be in Novell, but does MS offer this functionality?

 

[Jimmy Andersson]

If you set it to 'Change at next login...' the users must change password at
the next login. It won't let them login unless they change it.

Regards,
/Jimmy