Windows 7 Pro Domain Password Change Notification
I researched the resolutions in the related topics. What I found and confirmed. I ran gpedit at the desktop : Computer Configuration - Windows Settings - Security Settings - Local Policies - Security Options - "Interactive Logon: Prompt User I saw the default for Win7 Pro is 5 days. All other XP Pro domain desktops show 14 days. Do I change the the setting on the desktops to 14 days? or do I do it on the Win 2003 R2 domain controller? On a domain controller I see Default Domain Security Settings - Local Policies - Security Options - Interactive Logon: Prompt user to change Password before expiration. Not defined. Default setting is 14 days. I suppose the desktops local settings are used rather than the Domain controller setting? If I changed the Domain controller setting to any other number, would that change the desktop setting? If I need to change the setting on the desktop, I will have to do this on all Win 7 desktops that I deploy? thank you
December 29th, 2010 1:25am

Hi, Thanks for the post! If you change the Domain controller Security Settings, it will apply for every domain-joined computers. You can have a look at the group policy settings on the computer, run CMD as administrator, input gpresult /h gpreport.html A group policy report will be generated, then you can check the security setting on the computer. For the Group Policy usage, you can refer to: http://technet.microsoft.com/en-us/library/cc725828(WS.10).aspx In additions, for the security reason, please do not include the personal information in your thread, I will delete the email address for you. Regards, Miya This posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
December 30th, 2010 2:22am

To clarify your recommendation.... The domain controller settings.... Default Domain Security Settings - Local Policies - Security Options - Interactive Logon: Prompt user to change Password before expiration. Not defined. Because it is not defined, then the setting applied to the desktop is the local setting on the local desktop security settings? If I define the domain controller setting to 14 days, then that will be the setting applied to all desktops on the domain overriding the desktop local security setting? If I do the above recommendation, then the policy will change the local security setting on the Win 7 desktop to 14 days, overriding the default of 5 days? Thank you for the advice not to include personal information. I have not used the forums before and didn't think about the consquences.
December 30th, 2010 5:21pm

Yes, policy settings originating from domain Group Policy overwrite any conflicting policy settings found in any Local Group Policy to include administrative, non-administrative, and user specific Local Group Policy.This posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
December 30th, 2010 10:17pm

I have always believed what you have confirmed. Domain policy over rides local policy. Now that you have confirmed this, I fully understand what steps I must take.
December 31st, 2010 11:46am

Glad to hear that helps. Welcome to ask Windows 7-related questions here. Regards, MiyaThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
January 1st, 2011 9:53am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics