Security policy

How to Disable password expiration for Windows Server 2008 R2 (domain controller)?

Standard

I have written about how to disable password expiration for Windows Server 2008 R2 if it is NOT a domain controller. You can Find that post here: http://parasdoshi.com/2012/04/19/how-to-disable-the-password-expiration-policy-in-windows-server-2008-r2-demo-machine/

Now, if you are looking to disable the password for the Windows Server 2008 R2 dev. machine which is also a Domain Controller then follow these steps:

1) If you go to “Local security policy- you’ll see the options but it is not going to allow you to change the setting even if you are logged in as domain administrator.

windows server 2008 r2 disable password expiration local security policy

2. So we need an alternate path to edit the password expiration policy.

Go to Start > Administrative Tools > Group Policy Management

3. Here click on “edit” for the default domain policy for the domain of your choice:

windows server 2008 r2 disable password expiration group policy management

4. Go To Policies > Windows Settings > Security Settings > Account Policies > Password Policy

windows server 2008 r2 disable password expiration group policy management editor

5. Change the Password Policy!

Note that changing your password policy to disable password expiration is a security vulnerability. It’s applicable for your Demo Machine only. Or your Dev Machine. The reason I am documenting it that I do not want to change the password of Windows Server on which I have my Sharepoint BI dev environment Setup. It’s MY Dev Environment and I am NOT sharing it with other folks PLUS I do not anything sensitive on it, So I can afford disabling the password expiration policy.

That’s about it for this post. Happy Tweaking!

How to disable the password expiration policy in Windows Server 2008 R2 (Demo Machine) ?

Standard

Before we begin, Please note that:

1) it’s applicable for your Demo Machine only. Or your Dev Machine. The reason I am documenting it that I do not want to change the password of Windows Server on which I have my Sharepoint BI dev environment Setup. It’s MY Dev Environment and I am NOT sharing it with other folks PLUS I do not anything sensitive on it, So I can afford disabling the password expiration policy.

2) This Blog Post will Show you step by step procedure to disable the password expiration policy IF your server is NOT a Domain Controller. If it’s a domain controller then the steps are different.

UPDATE: Find a blog post about disabling password expiration policy for Domain Controller: http://parasdoshi.com/2012/06/19/how-to-disable-password-expiration-for-windows-server-2008-r2-domain-controller/

Now, Let’s begin:

1. Go to Start, Administrative Tools, Local Security Policy

2. Under Security Settings, Select Account Policies

3. Click on Password Policy.

windows server disable password expiration policy

4. Change the Value of Maximum Password Age to “0”

windows server disable password expiration policy

5. Click on Apply.

That’s about it. You have disabled the password expiration on your Windows Server Demo machine (which is not a domain controller)

If you are searching for a resource that could help you disable the password expiration policy on windows Server (Domain Controller) then please refer: http://forums.iis.net/t/1148164.aspx

UPDATE: Find a blog post about disabling password expiration policy for Domain Controller: http://parasdoshi.com/2012/06/19/how-to-disable-password-expiration-for-windows-server-2008-r2-domain-controller/