Azure AD password policy

Question

Azure AD password policy

Pamu 96

Hi everyone,

Is there a way to see the password expiration policy settings ( in days ) in Azure portal ?

I can view the 'Lockout threshold' and 'Lockout duration' in Security>Authentication Methods>Password Protection

but couldn't seem to find the 'password expiration' settings

Thanks in advance !

Edit : this is a cloud only account .. No on-premises AD

3 answers

Your answer

Answer 1

AmanpreetSingh-MSFT 56,871 Moderator

Hi @PamudithaMadushanka-8226 · Thank you for reaching out.

As of now, there is no option in Azure Portal to view Azure AD password policy. You will have to use PowerShell for this purpose.

Use below cmdlet to see password expiration settings for the tenant/domain. This requires MSOnline module.

Get-MsolPasswordPolicy -DomainName contoso.com

Use below cmdlet to see password expiration settings on users in the tenant/domain. This requires AzureADPreview module.

Get-AzureADUser -All $true | Select-Object UserPrincipalName, @{N="PasswordNeverExpires";E={$_.PasswordPolicies -contains "DisablePasswordExpiration"}}

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Pamu 96 Reputation points

2021-04-13T03:23:28.577+00:00

Thanks @AmanpreetSingh-MSFT

Is there a default policy ..or a default number of days where the passwords expire in Azure AD?
AmanpreetSingh-MSFT 56,871 Reputation points Moderator

2021-04-13T17:40:39.133+00:00

@PamudithaMadushanka-8226 · By default password expires after 90 days.
https://learn.microsoft.com/en-us/powershell/module/msonline/get-msolpasswordpolicy?view=azureadps-1.0#outputs
AmanpreetSingh-MSFT 56,871 Reputation points Moderator

2021-04-26T12:42:57.027+00:00

@PamudithaMadushanka-8226 · Just checking if above response helped or if you have any further questions.
ATUL PATIL 60 Reputation points

2023-03-21T13:14:57.15+00:00

If Get-MSOLPasswordPolicy show null value means AAD tenant has default password policy and password length would be 90 days.
For Notification default value is 14 days in that case does user start receiving password expiration notification 14 days before password expiry? and Notification would be email or other way? will it be one time notification, or it will continue till password expires.

Answer 2

MReed 36

sorry to add this on here, but am unable to post a new question at the moment.

we use both AD and AAD currently. AD on prem is synced to AAD via Azure AD connect.
we are a hybrid environment.
can someone tell me what the source of authority would be for all users?
or is it dependent on the users "source"?
in theory, we have 2 possibly disconnected password policies?
how do most admins handle this or configure generally?

Answer 3

Nicholas Kelly 1

You can use as it were admin center to change usage passwords time passwords time to live and change on 1st login

Share via

Azure AD password policy

3 answers

Your answer