How to make a specific password expiration policy for a specific group of users in azure ?

Question

How to create different password policies for users and choose a policy for every user

Answer 1

@Mohamed Soliman ,

Thanks for reaching out.

You can customize password expiration policy for cloud only users from M365 admin centers' Security & privacy tab or using Azure AD cmdlet Set-MsolPasswordPolicy which applies to all user accounts that are created and managed directly in Azure AD but unfortunately we cannot make a specific password expiration policy for a specific group of users.

The Azure AD password policy doesn't apply to user accounts synchronized from an on-premises AD DS environment using Azure AD Connect, unless you enable EnforceCloudPasswordPolicyForPasswordSyncedUsers.

Refer to the following articles to learn more:

Azure AD password policies
Set the password expiration policy for your organization

Hope this helps.

-----
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

@Mohamed Soliman ,

By creating custom password policies, you can create a specific password expiration policy for a specific group, location on Azure active directory domain services. To do this, you must be signed in to a user account that's a member of the AAD DC Administrators group.

For more details read the document - https://learn.microsoft.com/en-us/azure/active-directory-domain-services/password-policy#default-password-policy-settings

(If the reply was helpful please don't forget to upvote and/or accept as the answer, thank you)