Windows 7 / Networking

Password Expiration

If a user uses the same password for a long period of time, the possibility of the password being discovered and used by an attacker increases. In a domain, Group Policy is commonly used to force users to change their password on a regular basis.

Group Policy allows you to configure a setting one time and have it apply to all users or computers equally. The Default Domain Policy is created when the domain is created, and it includes several settings for the Password Policy.

When the default policy is used, users are required to change their password every 42 days. Users are given reminders to change their password when it is close to expiring. If the user ignores the warning until the last day, the user will be notified that the password has expired and must be changed.

The user won't be allowed to log on until the password has been changed. Luckily, the solution is simple. The user needs to change their password.

[Previous] [Contents] [Next]