‎How to check the password policy in our org?‎

Question

Dear Experts,

I've checked https://learn.microsoft.com/en-us/entra/identity/authentication/concept-sspr-policy#password-policies-that-only-apply-to-cloud-user-accounts?WT.mc_id=365AdminCSH_SupportCentral to understand how to confirm what is the password policy being set in our organization now, but I can't find where to confirm on such policy. The issue I'm facing is that, when a user tries to reset a new password via SSPR, from time to time, they will be prompted that the setting password doesn't comply with the password policy, even after they tried to use the recommended strong passwords advised by Mac or Web browsers.

I assume they tried to set passwords with too many failure times but I don't really know what is our in-use policy so I have no idea how to prevent this or provide users more clear instructions.

Please help.

Answer 1

Hi @Eaven HUANG

Thank you for reaching us!

I understand that you would like to check the password policy in your organization. For Cloud Only Accounts Microsoft has a pre-defined password policy which can't be changed. The only item you can change is how many days until a password expires and whether or not passwords expire at all.

If the users are unable to change the password, please check the users is on-prem user, if the users is on-premises users see is there any password policy exists in your domain controller for more information please refer the below article.
Azure AD Password PolicyReference: https://learn.microsoft.com/en-us/answers/questions/680844/how-to-make-a-specific-password-expiration-policy

Hope this helps. Do let us know if you any further queries.
Thanks,

Akhilesh.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.