windows2008r2 - FGPP

[vlad669]

Hi there,

I have problem with maximum password age within FGPP. I am unable to change maximum password duration, its fixed on 42days. I tried to lower the amount of time on PSO but with no result. I have created 1 PSO object which is applicated on global security group, other stuff like, pswrd complexicity, password length, pswrd history seems to be working properly.


AppliesTo : {CN=PW,OU=<>,DC=<>,DC=<>}
ComplexityEnabled : True
DistinguishedName : CN=NastavenieHesla,CN=Password Settings Container,CN=System,DC=<>,DC=<>
LockoutDuration : 00:10:00
LockoutObservationWindow : 00:10:00
LockoutThreshold : 8
MaxPasswordAge : 120.00:00:00
MinPasswordAge : 5.00:00:00
MinPasswordLength : 7
Name : NastavenieHesla
ObjectClass : msDS-PasswordSettings
ObjectGUID : bf01dbc8-acee-4987-9b9d-1dd046b24126
PasswordHistoryCount : 4
Precedence : 100
ReversibleEncryptionEnabled : False



PS H:\> net user test1 /domain
User name test1
Full Name test
Comment
User's comment
Country code 000 (System Default)
Account active Yes
Account expires Never

Password last set 28. 11. 2018 12:45:00
Password expires 10. 1. 2019 11:32:31
Password changeable 29. 11. 2018 12:45:00
Password required Yes
User may change password Yes

Workstations allowed All
Logon script
User profile
Home directory \\<>\home\test1
Last logon 28. 11. 2018 12:45:08

Logon hours allowed All

Local Group Memberships
Global Group memberships *Domain Users *PW
The command completed successfully.

Continue reading...