How to change days before password expires notice

OHPRS Admin 181 Reputation points
2024-04-22T17:45:27.6533333+00:00

I'm looking for a way to change the number of days before notifying users of password expiration from the default of 5 to some other number. I've found a web posting that references: Default Domain Policy (or Default Domain Controller Policy?) > Computer Configuration > Policies > Windows Settings > Security Settings > Local Policies > Security, and then lists several attributes all set to 5 days: Stand-Alone Server; DC Effective; Member Server Effective; Client Computer.

I don't have "Local Policies" under "Security Settings". Can I just create this? Is this the right place? if not (to either question) how would I create a policy to handle this? Which of the attributes do I need to change to x days.

This is for Group Policy in an Active Directory domain.

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,932 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,732 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Marcin Policht 12,320 Reputation points MVP
    2024-04-22T18:42:23.4366667+00:00

    Use Group Policy Management Console to open the Default Domain Policy GPO. You'll find there the path you're looking for: Computer Configuration > Policies > Windows Settings > Security Settings > Local Policies > Security

    If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

    hth

    Marcin

    0 comments
  2. Yanhong Liu 2,635 Reputation points Microsoft Vendor
    2024-04-23T02:23:13.61+00:00

    Hello,

    Thank you for posting in Q&A forum.

    Yes, you should edit the default domain policy on the domain controller using a domain administrator account and navigate to Computer Configuration → Policies → Windows Settings → Security Settings → Local Policies → Security Options and set the settings you need as shown in the image below:

    User's image

    I hope the information above is helpful.

    Best Regards,

    Yanhong Liu

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.