Windows password change reminder

As an IT Administrator, it is your job to ensure you have an appropriate means of reminding users when their passwords are due to expire. In this article we will take you through the steps needed to remind users when their passwords are due to expire using the native method.

The current security setting is enabled to a default figure of 14 days. Right click on the policy and modify the setting accordingly. You can adjust the number of days to your own liking. Once complete, users will get a warning message that will say something similar to the following whenever they connect to the domain:. Details Note: There are multiple files available for this download. Once you click on the "Download" button, you will be prompted to select the files you need.

File Name:. Password Change Notification Service x Date Published:. File Size:. System Requirements Supported Operating System. Install Instructions Click the file you want to download from the list below.

Save the file to a local drive. Extract the files to the domain controller s on which you want to install PCNS. Additional Information The Password Change Notification filter and service components must be installed on all Domain Controllers in a domain that is synchronizing with the configured targets.

In this case you may wish to implement a 3 rd party solution such as Specops Password Notification , and Specops Password Policy that is built to handle the entire process in a simple graphical interface.

You can also enable on-screen notifications to encourage users to change or reset their own passwords prior to expiration. With these solutions, it really is as simple as specifying the alert threshold and entering your SMTP server settings. You can even automatically include a list of your Password Policy rules in the email, as well as any additional messaging you may want to include.

For more information about password notification, and our self-service password reset solution, contact us. Tags: password expiration policy , password policy , password reset. You can get the current password expiration policy settings in a domain using this PowerShell command:. You can view the password age and the date when it was changed last time in the command prompt using the Net user command:.

But as you can see, the MMC snap-in only shows the time when the password was changed. It is not clear when the password expires. The msDS-UserPasswordExpiryTimeComputed value is calculated automatically based on the date of the last password change and the domain password policy.

To get password expiry dates for all users from the specific container OU in AD, you can use the following PowerShell script:. It results in a table with the list of active users, expiration date and time of the last password change. If you want to set a permanent password for an account, check the Password Never Expires option in the user properties in AD it is one of the bit values of the UserAccoutControl attribute.

Or you can enable this option with PowerShell by setting the user attribute :. You can set the Password Never Expires option at once for multiple users from a list in a text file:.