Password Expiry Question

[Matt]

Hi,
We have our passwords on our domain set to expire every 30 days. If a
user is logged on when the password expires their exchange stops working
as do any file shares they have, until they log off and back on and they
are asked to change it.
This is nasty. Is there any way to get the password change box to come
up while they are logged on..... or....to have it not expire until they
log off?

Signed,
Disgruntled in PA...

 

[CD]

Your users should not be staying logged on for that
long. The warning message starts being displayed 14 days
before a password expires(default), so if they are
staying logged in for more than 14 days at a time I would
address THAT problem. The password expiration is set by
a group policy that is only applied at login, so that is
the only time you will get the message.

 

[Jerold Schulman]

Hi,
We have our passwords on our domain set to expire every 30 days. If a
user is logged on when the password expires their exchange stops working
as do any file shares they have, until they log off and back on and they
are asked to change it.
This is nasty. Is there any way to get the password change box to come
up while they are logged on..... or....to have it not expire until they
log off?

Signed,
Disgruntled in PA...

See tip 8451 » Email a password expiration notice to all users whose password will expire in n days
in the 'Tips & Tricks' at http://www.jsiinc.com

Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com

 

[barabba]

I don't think so (however it could be a big security hole).

BTW I also noticed this behaviour and I was thinking of setting up a
procedure using vbscript. Basically, I want a vbscript to run each day
and inform those users (for example using smtp) whose password is
about to expire (say the day before) that they should change their
password.

If anybody has a better idea...

Bye
Bar

 

[Joe Richards [MVP]]

No, the mechanism that does that is in the gina code which is executed upon
interactive logon.

You will have to script something or have your users log off more often so they
can get the messages.


joe

 

[Matt]

Joe,
Ok next question then is.. what about users who connect from say a
branch office or from another company that connect to a file share over
the net or over a VPN... how are they to change their password? It
tells them when they try to connect that their password has expired, but
they are not given the option to change it.

 

[Joe Richards [MVP]]

You need to offer them a different option (say a web page) or make sure they
change their password before expiration.