Hello Guys, I am wondering if you can help me with my issue. I am trying to deploy more granular password policy using AD Administrative Centre Password Settings. The problem I have is that if I set the minimum password length to 16 and apply it to the test user it will not enforce the new policy. See picture below. I have tried gpupdate, user relog and it does not work. I works if I force user to change password at next login. Any idea why it is not enforcing the new settings? Regards, Przemek

Hi, You cannot force a user to change its password through Password Policy settings or GPO. To force user to change its password , you have to check the option user must change the password at next logon Please don't forget to mark helpful reply as answer

Active Directory Administration Center Password Settings not enforcing users to chage passwords

Accepted answer

Thameur-BOURBITA 32,831 Reputation points

2022-02-21T15:58:26.283+00:00

Hi,

You cannot force a user to change its password through Password Policy settings or GPO.
To force user to change its password , you have to check the option user must change the password at next logon

Please don't forget to mark helpful reply as answer
Please sign in to rate this answer.

1 person found this answer helpful.
Przemyslaw Wawrzyczny 21 Reputation points

2022-02-21T16:39:51.143+00:00

Hi Thameur,

Thank you for your feedback.

So once I force a user to change the password in the AD (user must change the password at next logon) it should then pickup the Password Setting not Default GPO password settings?

Regards,
Przemek

Thameur-BOURBITA 32,831 Reputation points

2022-02-21T16:46:09.26+00:00

Hi,

If there is no Password Setting object set to be applied on user , the user will pickup the password settings in Default domain GPO.

Please don't forget to mark helpful reply as answer

Przemyslaw Wawrzyczny 21 Reputation points

2022-02-22T09:29:08.857+00:00

Hi Thameur,

Thank you so much for your help,

I have one more question if you don't mind:

I assume that the same think will happen when the password change will be initiated by end user using "password change service in Office 365"?
Office 365 is linked to AD

Regards,
Przemek

Thameur-BOURBITA 32,831 Reputation points

2022-02-22T10:22:42.14+00:00

I assume that the same think will happen when the password change will be initiated by end user using "password change service in Office 365"?
Office 365 is linked to AD

It's possible to let use change its password from cloud. The synchronization tools Azure Ad connect between your azure AD and on-promise active directory will ensure the password synchronization via mechanism named password write-back.
To have more details , I invite you to read the link below:
tutorial-enable-sspr-writeback

Please don't forget to mark helpful reply as answer
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Active Directory Administration Center Password Settings not enforcing users to chage passwords

0 additional answers

Your answer