Share via

Password policy GPO

Dias DT 21 Reputation points
2022-10-13T05:15:20.163+00:00

I need to enable GPO password security in order users could change change their password every 120 days.
In GPO I configured :
Max password age 120 days
Minimum password age 1 days
Min owd length 8 charaters
Compexity Enabled
Linked to the group users.

Seems okay everything, but it shows that users must change not after 120 days, but 42 days. Could you help me in this issue?

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
5,099 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,244 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Daisy Zhou 21,361 Reputation points Microsoft Vendor
    2022-10-19T03:22:02.347+00:00

    Hello DiasDT-8403,

    Thank you for posting in our Q&A forum.

    For domain password policy, we must configure domain password policy within the "Default Domain Policy" group policy object, the password policy will take effect.
    If we configure domain password policy in other custom group policy object instead of the "Default Domain Policy", it will not take effect.

    Please check you configured domain password policy within the "Default Domain Policy" group policy object.

    Also, please check whether you configured FGPP in your domain. Because if you have configured FGPP, the FGPP will have a higher priority than domain password policy.

    For more information about FGPP, please read the link below.
    Step-by-Step: Enabling and Using Fine-Grained Password Policies in AD
    https://blogs.technet.microsoft.com/canitpro/2013/05/29/step-by-step-enabling-and-using-fine-grained-password-policies-in-ad/

    Hope the information above is helpful.

    Best Regards,
    Daisy Zhou

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments