"Mike Brower" wrote in message
news:6cec01c42f00$d4a42850$(E-Mail Removed)...
: How do I change the length of time passwords are good for
: on my Windows 2003 server? The yahoo that set up my network
: says they're factory set at 30 days and I want to only have
: them change when I fire someone.
: Mike
Mike...
The default max password age, OOTB, is 42 days, not 30. The "yahoo" that
setup your network, who may be the same "yahoo" who sold you the computers,
might use 30 days as their default.
Your security philosophy re: maximum password age needs to be re-examined.
The answer you're searching for is:
Maximum Password Age
You can use the Maximum Password Age setting to limit the time for which a
given password is valid. This decreases the odds of being able to crack a
password. For more information, see the example in the Passwords section in
this document.
In the Windows 2000 family and later, the Maximum Password Age setting is
located in the Group Policy MMC, in the Default Domain policy at Computer
Configuration\Windows Settings\Security Settings\Account Policies\Password
Policy\Maximum Password Age.
This setting determines the period of time (in days) that a user can use
their password before the computer requires the user to change it. You can
set passwords to expire in between 1 and 999 days, or you can specify that
passwords never expire by setting the number of days to 0.
Valid non-zero values are between 1 and 999, with a default value of 42.
Please review this article, especially where passwords are concerned so you
can understand why passwords should change frequently, should be complex, LM
Hashes should be disabled, etc.
http://www.microsoft.com/technet/pro...on124121120120
HTH...
--
Roland Hall
/* This information is distributed in the hope that it will be useful, but
without any warranty; without even the implied warranty of merchantability
or fitness for a particular purpose. */
Online Support for IT Professionals -
http://support.microsoft.com/service...p?fr=0&sd=tech
How-to: Windows 2000 DNS:
http://support.microsoft.com/default...b;EN-US;308201