We are using 2013 Exchange, and password is syncing from AD.

Length of password history maintained: 3

When some one trying to change the password from webmail he can able to reuse the previous password which should be according to policy.

can anyone help me to fix this issue.

Make sure that "Enforce password history" policy is configured and applied to exchange server. You can verify it by running "rsop.msc" from command line.

Also it might help https://support.microsoft.com/en-us/kb/2386717

• Edited by Slava Fedenko 15 hours 49 minutes ago

Hi,

Thanks, but the policy is applied properly in exchange. I have checked it in both mailbox server and cas server.

Make sure that "Enforce password history" policy is configured and applied to exchange server. You can verify it by running "rsop.msc" from command line.

Also it might help https://support.microsoft.com/en-us/kb/2386717

• Edited by Slava Fedenko Tuesday, June 30, 2015 3:38 PM

Make sure that "Enforce password history" policy is configured and applied to exchange server. You can verify it by running "rsop.msc" from command line.

Also it might help https://support.microsoft.com/en-us/kb/2386717

• Edited by Slava Fedenko Tuesday, June 30, 2015 3:38 PM

Let's try to isolate an issue. Try to change password on dedicated domain member workstation. As result we will determine if it is domain wide issue or exchange related.

Also take a look at https://www.petri.com/self-service-password-resets-for-owa-users-in-microsoft-exchange-2013

Make sure that "Enforce password history" is configured under Computer Configuration / Policies / Windows Settings / Security Settings / Account Policies / Password Policy

Also check settings by "Resultant Set of Policy" - RSOP.msc because it looks like GP settings are not pushed to server.

• Proposed as answer by David Wang_Microsoft contingent staff 6 hours 35 minutes ago

Let's try to isolate an issue. Try to change password on dedicated domain member workstation. As result we will determine if it is domain wide issue or exchange related.

Also take a look at https://www.petri.com/self-service-password-resets-for-owa-users-in-microsoft-exchange-2013

Make sure that "Enforce password history" is configured under Computer Configuration / Policies / Windows Settings / Security Settings / Account Policies / Password Policy

Also check settings by "Resultant Set of Policy" - RSOP.msc because it looks like GP settings are not pushed to server.

• Proposed as answer by David Wang_Microsoft contingent staff Friday, July 03, 2015 12:53 AM

Let's try to isolate an issue. Try to change password on dedicated domain member workstation. As result we will determine if it is domain wide issue or exchange related.

Also take a look at https://www.petri.com/self-service-password-resets-for-owa-users-in-microsoft-exchange-2013

Make sure that "Enforce password history" is configured under Computer Configuration / Policies / Windows Settings / Security Settings / Account Policies / Password Policy

Also check settings by "Resultant Set of Policy" - RSOP.msc because it looks like GP settings are not pushed to server.

• Proposed as answer by David Wang_Microsoft contingent staff Friday, July 03, 2015 12:53 AM

Hi,

I agree with Slava's response.

I have found these below article for your reference:

https://technet.microsoft.com/en-us/library/bb684904(v=exchg.141).aspx

https://technet.microsoft.com/en-us/library/dd277399.aspx

Hope it'll helpful to you.

Regards,

David