Password Settings Object - Password Reminder function?

Question

We've just implemented PSO's for password management because we're in sort of a service provider situation and didn't want to subject all of our customers to our specific password requirements. I've been asked that AD provide a reminder to our staff when
their password expiration date approaches. I know this is possible when using a GPO, but can't find any documentation if we can offer this 'service' when using a PSO. Any tips? Thanks! 

Answer 1

Hi Lee,
As far as I know, there is no dedicated attribute for password expiry notice during the configuration process of PSO objects, so the password expiry notice setting wouldn’t be affected by PSO.
The default password expiry notice are 5 days before the password expiration date in Windows 7 and Windows Server 2008 R2, and 14 days before expiration in previous Windows Systems.
We can modify this setting by group policy setting Interactive Logon: Prompt user to change password before expiration, which is under Computer Configuration\Windows Settings\Local Policies\Security Options; or using registry
entry PasswordExpiryWarning, which is under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon.
More information for you:
Step 1: Create a PSO
https://technet.microsoft.com/en-us/library/cc754461%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396
FGPP expiration notification
https://social.technet.microsoft.com/Forums/en-US/968a51d3-3a3d-4df4-a203-3cbd516a56d4/fgpp-expiration-notification?forum=winserverGP
How to change the password expiry notice default
https://technet.microsoft.com/en-us/library/ee829687%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]