Azure AD password policy

Question

Hi everyone,

Is there a way to see the password expiration policy settings ( in days ) in Azure portal ?

I can view the 'Lockout threshold' and 'Lockout duration' in Security>Authentication Methods>Password Protection

but couldn't seem to find the 'password expiration' settings

Thanks in advance !

Edit : this is a cloud only account .. No on-premises AD

Answer 1

Hi @PamudithaMadushanka-8226 · Thank you for reaching out.

As of now, there is no option in Azure Portal to view Azure AD password policy. You will have to use PowerShell for this purpose.

Use below cmdlet to see password expiration settings for the tenant/domain. This requires MSOnline module.

• Get-MsolPasswordPolicy -DomainName contoso.com

Use below cmdlet to see password expiration settings on users in the tenant/domain. This requires AzureADPreview module.

• Get-AzureADUser -All $true | Select-Object UserPrincipalName, @{N="PasswordNeverExpires";E={$_.PasswordPolicies -contains "DisablePasswordExpiration"}}

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

sorry to add this on here, but am unable to post a new question at the moment.

we use both AD and AAD currently. AD on prem is synced to AAD via Azure AD connect.
we are a hybrid environment.
can someone tell me what the source of authority would be for all users?
or is it dependent on the users "source"?
in theory, we have 2 possibly disconnected password policies?
how do most admins handle this or configure generally?

Answer 3

You can use as it were admin center to change usage passwords time passwords time to live and change on 1st login