How can user access outlook without change their password after 30 days.

Hriday Saha 46 Reputation points

I have an Azure AD hybrid model and user are sync from On-premises. I have a password expiration policy of 30 days in cloud. User have to change password after 30 days. But the concern is some User who have in specific OU in On-premises can access Outlook without changing password. I have checked Users Audit log from Azure AD but did not find any password changing log there.

I hope you understand the scenario. Did I miss something? FYI, I have also a on-premises password expiration policy of 30 days and user are not in domain Network. I really appreciate your help on it.

Thanks in advance!

Microsoft Exchange Hybrid Management
Microsoft Exchange Hybrid Management
Microsoft Exchange: Microsoft messaging and collaboration software.Hybrid Management: Organizing, handling, directing or controlling hybrid deployments.
1,950 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,092 questions
{count} votes

1 answer

Sort by: Most helpful
  1. KyleXu-MSFT 26,226 Reputation points

    @Hriday Saha

    Do you want to prevent users who have not changed their passwords from accessing Outlook? If so, I would suggest you let them try to log on OWA first, check whether password expiration policy applied on them.

    If they don't need to change their password when logon OWA, it means this expiration policy hasn't applied to their mailboxes now.

    If they need to change password from OWA, it means the expiration policy has applied on their mailboxes. But, for Outlook clients, there exists cache information, they may not get a reminder to change your password immediately. For more detailed information about it, you could have a look at this article.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments