Password expired in A.D local but the users continue accessing the office 365 resources.

Question

Password expired in A.D local but the users continue accessing the office 365 resources.

Answer 1

This happens because Office 365 does not immediately enforce on-premises Active Directory (AD) password expiration for synchronized users.

You can manually force users to change passwords in Azure AD:

Open PowerShell as Admin and copy-paste the following:

Set-MsolUserPassword -UserPrincipalName ******@domain.com -ForceChangePassword $true

You may run the following PowerShell command in Azure AD PowerShell:

Set-MsolDirSyncFeature -Feature EnforceCloudPasswordPolicyForPasswordSyncedUsers -Enable $true

Answer 2

Hi @Adriano Cezar Sousa Neves

Hi, They continued access to M365 resource with an expired password in AD , because the authentication is not performed by active directory , it should be managed by Entra ID or another IDP.

In this case user can continue access on M365 ressource even the Password hash sync enabled until changing his passowrd in Aactive directory and sync it to Entra ID.

---

Please don't forget to accept helpful answer

---

Answer 3

Hi @Adriano Cezar Sousa Neves

Thank you for reaching Microsoft Q&A Forum and Sorry for the delay response.

If I understand correctly, the AD user's password expires but the users are able to access the office 365 resources with the expired password.
May I know these AD users are synchronized to Entra ID with Entra Connect, if yes it might be the issue with password policy is not comply with the Entra ID.

To fix this issue enable the CloudPasswordPolicyForPasswordSyncedUsersEnabled feature, which enforces cloud password policies for users whose passwords are synchronized from on-premises Active Directory (AD) to Entra ID (Azure AD). This ensures that synchronized users comply with the Azure AD password expiration policy, even if their on-premises password has expired. By default, this feature is disabled.
Reference: CloudPasswordPolicyForPasswordSyncedUsersEnabled

Hope this helps. Do let us know if you any further queries by responding in the comments section.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.