question

NoblesJustinLukas-7531 avatar image
0 Votes"
NoblesJustinLukas-7531 asked FanFan-MSFT commented

Display password policy to enduser changing their password

What I would like to accomplish, is to display the password policy when a user wants to change their password via "STRG + ALT + ENTF" -> "Change a password" .
As of right now only the following is displayed when changing it:
90623-image.png

And if the password doesn't meet the policy the following message appears, but it doesn't give any indication about what the actual policy requires.
90625-image.png

How would it be possible to include the information of the actual policy in this process of changing the password?


windows-10-general
image.png (325.3 KiB)
image.png (386.5 KiB)
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@NoblesJustinLukas-7531 , If you are talking about the details to appear only during password change for a windows 10 machine , I do not think there is any such customization available out of the box. You can only customize the details using group policy related to interactive logon which customizes the text a user will see while logging on. It does not specifically apply on during the password change.


0 Votes 0 ·

Thanks for your reply. But as you mentioned the gpo for interactive logon doesn't apply during the password change and would also impact every Logon, which would cause unnecessary popups for users just wanting to log in.
A solution a might be to integrate the details of the password policy on the lockscreen which will also show up during password change.
Although this will probably cause the design to be less clean, it should provide the necessary information at the time it is needed.
That being said I find it hard to imagine, that Microsoft doesn't provide an solution for this. To me it seems like a feature which is widely spread among password changing GUI's and creates great benefit for users wanting to change their password.

0 Votes 0 ·

1 Answer

FanFan-MSFT avatar image
0 Votes"
FanFan-MSFT answered FanFan-MSFT commented

Hi,

Based on my research, the password policy in domain can display during the change process.

But before change the password policy, you can check the password by the PowerShell command (there will be only one password policy in the domain):
Get-ADDefaultDomainPasswordPolicy

If you set the FGPP for specific users, you can run command to get a fine-grained policy for a specified user
Get-ADFineGrainedPasswordPolicy -Identity username

Best Regards,

· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,
Welcome to share your current situation if there are any updates.
Please feel free to let us know if you need further assistance.
 
Best Regards,

0 Votes 0 ·

Hi,
thanks for your answer. I am just now able to approach this issue further and will keep you posted ;)

0 Votes 0 ·

After retrieving the default policy it seems like there are no FGPP set. Would these be displayed automatically during the change process? or how would they be displayed to the user wanting to change the password?

0 Votes 0 ·
FanFan-MSFT avatar image FanFan-MSFT NoblesJustinLukas-7531 ·

Hi,

The settings will not display when users change their password.
What i mean is that you can check the settings using the command mentioned above before change the password.
Best Regards,

0 Votes 0 ·