How to set up a password expiration policy in an hybrid environment for a set of users

Question

Hi folks,

I need your help with implementing a password expiration policy for one of my customers. Here's the situation:

• The customer has Entra ID synced with an on-premise Active Directory (AADC)
• All Users have Microsoft Business Premium licenses.
• All Devices are Microsoft Entra joined and managed by Intune
• They want passwords to expire every 180 days.

The challenge is that the customer want to apply this policy to a set of users, not all !

How can I enforce this password expiration policy only for a set of users without affecting the others ?

The global idea is that users will be prompted every 180 days to change their password by the usual M365 pop-up.

Note : They don't use on-premise resources, On-Prem Active Directory is here due to history..

Thanks in advance for your advice !

Answer 1

Hello AEBY Julien,

Thank you for posting in Microsoft Community forum.

From the description above, I understand your question is related to Microsoft Entra.

Since there are no engineers dedicated to Microsoft Entra in this forum. in order to be able to get a quick and effective handling of your issue, I recommend that you repost your question in the Q&A forum, where there will be a dedicated engineer to give you a professional and effective reply.

Here is the link for Q&A forum.
Questions - Microsoft Q&A

Click the "Ask a Question" button in the upper right corner to post your question and type "Microsoft Entra ID" tag and select any tags related to your productions.

I hope the information above is helpful.

If you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou