Password Expire policy

dear all,

os = window server 2008 standard r2

client = window xp & window 7

by default maximum password age 42 days.

how policy behave? ( if laptop user not connected company more 42 days )

i think after 42 days, whether user connected company lan or not, prompt password change , suppose if user change password "abc@123", after user able use laptop.

now assume same user had not brought laptop company , user logging other pc in company ( in domain ). once again prompt change password. user had changed "xyz@123"

now after happen, if brought laptop in domain network.now through password user can login in domain network.

abc@123 or xyz@123

please let me know,

---

thanks & regards,
param
mcse, ccna
live voice discussion on related issue, please vist blog at
www.paramgupta.blogspot.com

 

> u mean 45 days password never expire, if user out of

> domain network?

 

yes. pw age stored in domain, , if offline, client cannot

check pwdlastset expiry. if local account, expire.

 

> hmm...that means gpo not applied when u outside of

> domain network.

>

 

sure not - how should they? if settings once applied,

usually stay (-:

 

sincerely, martin

 

---

no not evil, if know doing: or bad gpos?
wenn meine antwort hilfreich war, freue ich mich über eine bewertung! if answer helpful, i'm glad rating!

Windows Server  >  Group Policy