Can't change Maximum password age on a domain? Apply or modify password policy
If you try gpedit.msc or secpol.msc > Security Settings > Account Policies > Password Policy > Maximum password age on a modern Windows Server domain system you will fail: The value (and all the others) are grayed out. The proper way to set the values for Password Policy as a Password Settings Object (PSO): adsiedit.msc Right-click and "Connect to..." and accept defaults ... Note for parameters of type "duration" you may use the so called I8 values or the more easy to read d:hh:mm:ss format. Sources: Configuring Granular Password Settings in Windows Server 2008 Creating a PSO using ADSI Edit Apply or modify password policy