Password Expiration - Enable or Disable

That would be a one time option for forcing a password change, but in a password policy situation we would need that to happen every time the password expires. Does this mean that I would have to manually remove the checkmark on each client.

Sorry I should have mentioned we are not in a domain environment as our endpoint computers are spread out all over multiple states and joining them to a domain is a problem because of distance and bandwidth. I would love to have them in AD with the ability to control them better.

I am using Kaseya to push out scripts to the machines, and what I am trying to do is as follows:
User must change password at next logon.
Minimum Password Length
Password Expiry warning 10 days
MaxPasswordAge 90 Days
Alphanum Pwds
Password History

Some of these settings I am changing the registry and some I am using script or power shell, I can't seem to find all the settings in on place in windows 7 Pro, unless I make changes manually.
Am I shooting myself in the foot?

I must admit I'm a little lost with what you are asking. Are you shooting yourself in the foot? I don't know. What problem exactly are you facing?

dkotula said:

That would be a one time option for forcing a password change, but in a password policy situation we would need that to happen every time the password expires.

When a user's password expires, that user will be forced to change their password upon the next login they make. This behaviour already is already enabled and can't be set differently.

dkotula said:

Sorry I should have mentioned we are not in a domain environment [...]

Sorry, I should have mentioned that the commands in my post above do not work for a domain environment. Only on local accounts to a machine.

dkotula said:

I am using Kaseya to push out scripts to the machines, and what I am trying to do is as follows:
User must change password at next logon.
Minimum Password Length
Password Expiry warning 10 days
MaxPasswordAge 90 Days
Alphanum Pwds
Password History

What you are trying to do isn't clear to me. Are you in search of the command equivalent to each of the above?

Sorry, I was away taking some classes last week.
I am able to push out some password policy scripts, but it seems I have to do this from multiple locations. Some I am pushing out by changing registry settings, and others I am changing using PowerShell. Is there a way of using a script to perform all the changes from one common location? Above was a small list of the things I'm pushing out, and they work, I'm sure there is a much easier way to accomplish this. I would love to be able to do this from AD but because of the distance between all of the locations, we cannot join our systems to a domain which limits me to workgroup configurations.

Sorry for my delay. It's difficult to keep track of members' issues that reside within the threads of tutorials.

As what you're asking no longer relates to the topic of this tutorial, I recommend you describe your issue in a new thread of it's own. Your chance of receiving an answer there, and the rate at which you'll receive replies will triple.

Hi,

All explanation here are for Windows Professional but do not work with Home Premium.

This is a new embarassing option that I didn't have before.

Please tell me how to stop it?

Thanks,
Bernard

Thank you Brink, I did it and I get :

C:\Users\Bernard>wmic path Win32_UserAccount set PasswordExpires=False
Updating property(s) of '\\BERNARD-PC\root\cimv2:Win32_UserAccount.Domain="Berna
rd-PC",Name="Administrator"'
Property(s) update successful.
Updating property(s) of '\\BERNARD-PC\root\cimv2:Win32_UserAccount.Domain="Berna
rd-PC",Name="Bernard"'
ERROR:
Description = Generic failure

So what is it?

Regards,
Bernard

Thank you Brink for this very helpful tutorial.