All users passwords in the domain expired without Notice

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi, I have a domain users used to recive the notification "your password is
about to expire within 14 days". Today all users passwords are expired and no
users got the notification at all. I checked the registry value
"PasswordExpiryWarning" on the DCs and it was set to 14. Ichecked the Default
Domain Policy\Security Settings\Local Policies\Security Options\Interactive
Logon: Prompt user to change password before expiration and it was set to
"Not Defined". I enabled this and it defaults to 14.

Any idea on why the password expired without giving the notification??
althought it was working fine before and no changes intoduced to these
policies.
 
What does it show [or did it show] in the Local Security Policy of a domain
computer for that settings under local policies/security options?? If it is
not what you expect you can try running rsop.msc on a domain computer to see
if there is a Group Policy enforcing that setting. I assume users were able
to change their passwords after being told they had expired? --- Steve
 
Thanks Steven,

I doubled checked it once it happned and now and it shows to prompt the user
before expiration in 14 days (Source Default Domain GPO).

Any Idea!!

Steven L Umbach said:
What does it show [or did it show] in the Local Security Policy of a domain
computer for that settings under local policies/security options?? If it is
not what you expect you can try running rsop.msc on a domain computer to see
if there is a Group Policy enforcing that setting. I assume users were able
to change their passwords after being told they had expired? --- Steve


Feras Mustafa said:
Hi, I have a domain users used to recive the notification "your password
is
about to expire within 14 days". Today all users passwords are expired and
no
users got the notification at all. I checked the registry value
"PasswordExpiryWarning" on the DCs and it was set to 14. Ichecked the
Default
Domain Policy\Security Settings\Local Policies\Security
Options\Interactive
Logon: Prompt user to change password before expiration and it was set to
"Not Defined". I enabled this and it defaults to 14.

Any idea on why the password expired without giving the notification??
althought it was working fine before and no changes intoduced to these
policies.
Click to expand...
Click to expand...
 
If you just changed that setting you will not know if it works correctly
until the next time that passwords are about to expire. It also should show
the same in Local Security Policy of all domain computers. If it is not then
you may have a problem with Group Policy applying to your domain computers
which often is shown as userenv errors in the application log of the domain
computer. I would also verify that the Local Security Policy of all your
domain controllers shows the same. You can use secpol.msc to view Local
Security Policy on domain controllers. --- Steve


Feras Mustafa said:
Thanks Steven,

I doubled checked it once it happned and now and it shows to prompt the
user
before expiration in 14 days (Source Default Domain GPO).

Any Idea!!

Steven L Umbach said:
What does it show [or did it show] in the Local Security Policy of a
domain
computer for that settings under local policies/security options?? If it
is
not what you expect you can try running rsop.msc on a domain computer to
see
if there is a Group Policy enforcing that setting. I assume users were
able
to change their passwords after being told they had expired? --- Steve


message
Hi, I have a domain users used to recive the notification "your
password
is
about to expire within 14 days". Today all users passwords are expired
and
no
users got the notification at all. I checked the registry value
"PasswordExpiryWarning" on the DCs and it was set to 14. Ichecked the
Default
Domain Policy\Security Settings\Local Policies\Security
Options\Interactive
Logon: Prompt user to change password before expiration and it was set
to
"Not Defined". I enabled this and it defaults to 14.

Any idea on why the password expired without giving the notification??
althought it was working fine before and no changes intoduced to these
policies.
Click to expand...
Click to expand...
Click to expand...
 
Back
Top