Can't change Maximum password age on a domain? Apply or modify password policy
If you try gpedit.msc or secpol.msc > Security Settings > Account Policies > Password Policy > Maximum password age on a modern Windows Server domain system you will fail: The value (and all the others) are grayed out.
The proper way to set the values for Password Policy as a Password Settings Object (PSO):
- adsiedit.msc
- Right-click and "Connect to..." and accept defaults
- ...
Note for parameters of type "duration" you may use the so called I8 values or the more easy to read d:hh:mm:ss format.
Sources:
Comments
Post a Comment