Password Expiration
If a user uses the same password for a long period of time, the possibility of the password being discovered and used by an attacker increases. In a domain, Group Policy is commonly used to force users to change their password on a regular basis.
Group Policy allows you to configure a setting one time and have it apply to all users or computers equally. The Default Domain Policy is created when the domain is created, and it includes several settings for the Password Policy.
When the default policy is used, users are required to change their password every 42 days. Users are given reminders to change their password when it is close to expiring. If the user ignores the warning until the last day, the user will be notified that the password has expired and must be changed.
The user won't be allowed to log on until the password has been changed. Luckily, the solution is simple. The user needs to change their password.
In this tutorial:
- Managing Windows 7 in a Domain
- The Domain
- What is Wrong with Workgroups
- The Domain Concept
- Active Directory
- Domain Security
- Joining a Domain
- Windows 7 Offline Domain Join
- Browsing the Domain
- Searching the Domain
- Custom Searches
- Assigning Permissions to Domain Members
- The Double-Thick Security Trick
- Creating a Test Bed
- Creating a Domain
- Installing Windows Server 2008 on vPC
- Configuring a Windows Server 2008 Server
- Promoting a Server to a Domain Controller
- Joining Windows 7 to a Domain
- Authentication vs Authorization
- Authentication
- Authorization
- Built-in Groups
- Organizing Users with Groups
- Group Scope and Group Type
- Creating Users and Groups in a Domain
- Using HomeGroup with a Domain-Based Computer
- Identifying and Resolving Logon Issues
- Hardware vs. Network
- Using Cached Credentials
- Password Expiration
- Determining Logon Context
- Logon Hours Compliance
- Restricting Computer Access
- Time Synchronization
- Understanding User Profiles
- Standard Profiles
- Roaming Profiles
- Implementing Roaming Profiles
- Mandatory Profiles
- Super-Mandatory User Profiles
- Modifying the Default User Profile
- Configuring Settings with Scripts
- Anti-Malware Software
- Microsoft Windows 7 Defender
- Third-Party Anti-malware Software