Password Policy Requrements Enforced and Synced From AAD to AD

Force Strong 1 Reputation point
2021-03-26T15:11:47.647+00:00

So we are going to force our users to change their passwords every 90 days. I have password sync turned on and working from Azure AD to our on prem AD. This works perfect and allows our users to change their passwords in the cloud but then be synced over to AD. What is not working is the password policy requirements I setup in AD on Prem Group Policies. Our staff can make any kind of password without restrictions. All of our devices are Workgroup joined in Azure/Intune. We do not have domain joined machines. Does anyone have any ideas for how we can force password requirements through Intune/Azure/Microsoft? We are at a loss right now.. ![81923-screenshot-2021-03-26-110659.png][1] ![81908-screenshot-2021-03-26-110659.png][2] [1]: /api/attachments/81923-screenshot-2021-03-26-110659.png?platform=QnA [2]: /api/attachments/81908-screenshot-2021-03-26-110659.png?platform=QnA

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,435 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. AmanpreetSingh-MSFT 56,306 Reputation points
    2021-03-31T08:26:10.747+00:00

    Hi @Force Strong · Thank you for reaching out.

    As the devices are not domain joined, password policies defined in Group Policies won't apply. You need to configure password expiration policy in Azure AD by using following cmdlet:

    Set-MsolPasswordPolicy -ValidityPeriod 90 -NotificationDays 14

    Keep in mind that the password expiration policy configured in Azure AD are not by default applied to the synced user accounts. To apply Azure AD Password Expiration Policy to the users synced from On-premises AD, use below cmdlet:

    Set-MsolDirSyncFeature -Feature EnforceCloudPasswordPolicyForPasswordSyncedUsers

    Read more: EnforceCloudPasswordPolicyForPasswordSyncedUsers

    -----------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.