Grace Login Count?

Grace Login Count?

Post by Brian Rode » Wed, 17 Sep 2003 10:10:01


Is there a GPO setting that specifies how many "grace logins" you get when
your password is expired, before your account is locked?

TIA for your help!
 
 
 

Grace Login Count?

Post by Jimmy Ande » Wed, 17 Sep 2003 22:03:37

If the password is expired your out of the network. Password expiration is
based on time.

Regards,
/Jimmy
--
Jimmy Andersson, Q Advice AB
Microsoft MVP - Active Directory
---------- www.qadvice.com ----------

 
 
 

Grace Login Count?

Post by Brian Rode » Wed, 17 Sep 2003 22:55:28

Thanks for the quick reply.

What I'm getting at is when I expire passwords, thereby forcing users to
change their passwords. I think they get 3 grace logins to change their
passwords - is this true?

Is this "grace login" setting chanheable in a GPO?

Thanks for your help!





when
 
 
 

Grace Login Count?

Post by Jimmy Ande » Wed, 17 Sep 2003 23:15:22

I'm not sure I understand what you're meaning with grace logins. If you set
the Account Expires it will expire by the end of that date. Or do I miss
something....?

Regards,
/Jimmy
--
Jimmy Andersson, Q Advice AB
Microsoft MVP - Active Directory
---------- www.qadvice.com ----------






is
 
 
 

Grace Login Count?

Post by Brian Rode » Thu, 18 Sep 2003 04:12:47

Maybe I'm confusing Microsoft with Novell, but in AD Users and Computers I
can set a user account to "change password at next Login".

I thought that you could elect to "not" change the password immediately, but
you had to get it done by the third login. If you didn't, your account is
locked.

So anyway, this may just be in Novell, but does MS offer this functionality?



set




expiration


get
 
 
 

Grace Login Count?

Post by Jimmy Ande » Fri, 19 Sep 2003 05:50:36

If you set it to 'Change at next login...' the users must change password at
the next login. It won't let them login unless they change it.

Regards,
/Jimmy
--
Jimmy Andersson, Q Advice AB
Microsoft MVP - Active Directory
---------- www.qadvice.com ----------




but
functionality?




to
their