Can't change Maximum password age on a domain? Apply or modify password policy

If you try gpedit.msc or secpol.msc > Security Settings > Account Policies > Password Policy > Maximum password age on a modern Windows Server domain system you will fail: The value (and all the others) are grayed out.

The proper way to set the values for Password Policy as a Password Settings Object (PSO):

  1. adsiedit.msc
  2. Right-click and "Connect to..." and accept defaults
  3. ...

Note for parameters of type "duration" you may use the so called I8 values or the more easy to read d:hh:mm:ss format.


Sources:

Comments

Popular posts from this blog

SQL Server Setup: Windows Firewall warning (Ports)

SQL Server 2014 Enterprise Edition: Server Setup: Feature Selection

How to read an assembly.dll.config