Make domain passwords expire on domain

Red Squirrel

No Lifer
May 24, 2003
70,592
13,806
126
www.anyf.ca
How would one go about making it so passwords expire after a certain time (ex 60 days). i know how to do it per user, but how would we globally set that? This is windows 2003 server.
 

dphantom

Diamond Member
Jan 14, 2005
4,763
327
126
Using GPMC, look under Computer Configuration - Windows Settings - Security Settings - Account Policies - Password policy.

In a Windows 2003 domain, you can have only 1 password policy. This will normally be applied at the domain level.
 

Red Squirrel

No Lifer
May 24, 2003
70,592
13,806
126
www.anyf.ca
Will this also control the per-user setting for if the password expires or not though? Also to complicate things more, some accounts still need non expiaring passwords. So wondering if there's a way to mass check them all, then we just manually go and uncheck the ones we don't want.
 
Mar 26, 2008
148
0
0
Run ADUC (Active Directory Users and Computers). Select all the users or just the users you want to make the change. Right-hand click, and select Properties, you'll see all the options available.