Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Local security policy in windows 7

25 Jul 2014   #1
RFED

Windows 7 ultimate 64 bit
 
 
Local security policy in windows 7

Hi guys,

Need your guidance in understanding Local security policy

1) I have configured local security policy in windows 7 professional under run-->secpol.msc--> Securuity policies-->Account policy---->Password policy

a) Minimum password length is set to 8 characters
b) Password must meet complexity requirements is enabled (I have set a password which has lower case/number and special character)
c) Maximum password age is set to 3 days

This means password will expire in 3 days. I need to change the password after 3 days correct?

d) Enforce password history---15 passwords remembered

This means the last 15 passwords is remembered so that user will not go back to the previously used password. Is this correct?

e) Minimum password age

I have set the minimum password age to 1

Does this mean password can be changed after 1 day?
Does this mean password cannot be changed before 24 hours (Once the password is set)? I may be wrong here because I was able to change the password before 24 hours. If I'm wrong please explain me what is minimum password?

Also for point d) Initially I set the password as "X" and then changed to "Y", I changed it back to "X" and still there was no error. Enforce password history says we cannot use the same password which was used previously but I did not get any error while changing the password (Changed it to the same password "X" which I used in the first instance).


Please help me in understanding the concept clearly.

Thank you
RFED


My System SpecsSystem Spec
.
25 Jul 2014   #2
Brink

64-bit Windows 10 Pro
 
 

Hello RFED,

That's how I understand it.

Just to verify, did you also enable password expiration to enforce your min/max password age?

Password Expiration - Enable or Disable

Password History Enforcement - Enable or Disable
My System SpecsSystem Spec
25 Jul 2014   #3
bigmck

Windows 7 Home Premium 32-Bit - Build 7600 SP1
 
 

It appears to me that you have everything correct. == The Minimum Password Age is rather strange. To me it means you can't change it before the minimum is up. I don't see why you would even need to have that filled in. I would just leave that as Zero so that you can change the password when ever you want.
My System SpecsSystem Spec
.

25 Jul 2014   #4
RFED

Windows 7 ultimate 64 bit
 
 

Quote   Quote: Originally Posted by bigmck View Post
It appears to me that you have everything correct. == The Minimum Password Age is rather strange. To me it means you can't change it before the minimum is up. I don't see why you would even need to have that filled in. I would just leave that as Zero so that you can change the password when ever you want.
Hello bigmck,

That is exactly how I understood. When I set the Minimum password age to one, I thought I will not be able to change the password for atleast a day but strange thing is I was able to change to password.

It is not that I want to use the local security policy but was just trying to see how it works but could not understand both "Enforce password history" and "Minimum password age"
My System SpecsSystem Spec
25 Jul 2014   #5
RFED

Windows 7 ultimate 64 bit
 
 

Quote   Quote: Originally Posted by Brink View Post
Hello RFED,

That's how I understand it.

Just to verify, did you also enable password expiration to enforce your min/max password age?

Password Expiration - Enable or Disable

Password History Enforcement - Enable or Disable
Please check this screen shot

Enforce Password history is set to 15 password but still I was able to change the password which I set earlier


Attached Thumbnails
Local security policy in windows 7-123.png  
My System SpecsSystem Spec
25 Jul 2014   #6
Brink

64-bit Windows 10 Pro
 
 

Do you have password expiration enabled like below?

Password Expiration - Enable or Disable
My System SpecsSystem Spec
25 Jul 2014   #7
RFED

Windows 7 ultimate 64 bit
 
 

Quote   Quote: Originally Posted by Brink View Post
Do you have password expiration enabled like below?

Password Expiration - Enable or Disable
Please check the screen shot which I set

Thanks for helping me out
My System SpecsSystem Spec
25 Jul 2014   #8
Brink

64-bit Windows 10 Pro
 
 

That screenshot is not for password expiration. Please check the link to verify if you do.
My System SpecsSystem Spec
25 Jul 2014   #9
RFED

Windows 7 ultimate 64 bit
 
 

Quote   Quote: Originally Posted by Brink View Post
That screenshot is not for password expiration. Please check the link to verify if you do.
Password expiration is not checked
My System SpecsSystem Spec
25 Jul 2014   #10
Brink

64-bit Windows 10 Pro
 
 

I must admit that I'm not sure why it let you change your password back to a recent old one again with both policies enabled.
My System SpecsSystem Spec
Reply

 Local security policy in windows 7




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Incomplete local security policy
Hi, My local security policy on my Win 7 Pro x64 machine is only showing a limited set of policies (see below). I need to modify "Network security: LAN Manager authentication level" in order to remotely connect to my PC at work. But that policy does not appear in my local security policy. I have...
General Discussion
modify local security policy from command prompt in Windows 7?
Hey all I am trying to enable the "do not display last user name" in Local security policies via command prompt but am hitting dead ends. I have to do this to around a hundred computers and was hoping I could just write a batch file to do so but can't figure out the command... The path to it is...
Customization
Local Security Policy
Hi Im wondering if someone can help me disable the run command in windows 7 local security policy for local users, i can apply a number of different setting but i can seem to the policy for run command thanks
General Discussion
Local Security Policy Recommended Changes?
Hi there. (1st time poster, long time reader) Would would you recommmend changing (for security reasons) from the original default settings in local security policy. I'm connecting directly to a modem with a single PC that's not used for file sharing or remote use etc. Thanks for any...
System Security
Customize Local Security Policy
What can I do in the LSP to enhance my machine and windows 7? I love customization, but don't want to go in to anything an start clicking. I really don't know what else I can do with it inside the LSP. For example, I added the CTL + ALT + DEL function. Is there anything else or not?
Customization
Group Policy Editor or Local Security Policy
Will either of these allow me to restrict drive access to a single user only? I've tried to restrict drive access with Group Policy Editor but it applies the restriction globally--even to me the administrator. Could anyone let me know if this is possible and how to do it? Much thanks.
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 16:43.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App