Password Expiration - Enable or Disable

FormerUSMC · Dec 11, 2013

Option two was exactly what I needed, thank you very much for the info! Added one line of code to my script (two if you count the remarks) and bingo bango.

Brink · Dec 11, 2013

You're most welcome FormerUSMC, and welcome to Seven Forums.

psychotron · Jan 1, 2014

Just thought I'd leave a reply on what I did to stop the "consider changing your password" notification "expires in so many days". I tried all the fixes online including these posted here, no go. I have 7 Home Premium on a newer laptop I bought used, have been using w8 on my main laptop for a good 6 months with no password and have yet to get a similar notification.

I just clicked on the wrench next to the x when the message popped up at startup, it brought me to a icon/notification setting window and I just scrolled down to password notification and changed setting to "never display/show". Done.

I'm admin in both my laptops and all the fixes online I tried including these here would just end with the command prompt or pc telling me not available or something similar to the effect that the fix didn't work. I see in the thread pics professional users are seeing this notification before the desktop loads up, for me on windows 7 home the message would pop up in a small box at the lower right corner right after 7 was mostly or fully loaded up after restart or power up.

Just thought I'd leave my fix that worked for me.

Brink · Jan 1, 2014

Hello psychotron,

Thank you for posting this for others.

It sounds like you used this below to hide the password notification in case someone else would like to turn it off and wasn't fast enough to click on the notification itself.
http://www.sevenforums.com/tutorial...ons-hide-show-system-icons-notifications.html
The only problem though is that was only a notification you turned off, and not actual password expiration. If password expiration wasn't disabled for your user account, then the password would still expire in those X many days.

psychotron · Jan 1, 2014

Thanks.

The thing is there was never a password created by me. Being this is a used laptop someone could of created a password but the only user accounts are mine as admin and a guest account that has not been activated. The original user account I deleted. And the only options in my admin account are to create a password not edit or change one so that tells me there is no active password.
So the fact that it was asking me to change password means there was a password and if I don't do anything I won't be able to log into windows 7?

Whatever that answer to the above is all the fixes I tried including yours failed, I would assume it is because I don't have admin rights but I do as far as I know. So the fact that none of the other fixes worked could that mean I don't actually have a admin account even though when I go to control panel-users accounts it says my user account is admin?

Also, I was trying to add photo of my user account page. Is there a way to just upload pic from my harddrive or are we forced to do the url thing?

Brink · Jan 1, 2014

While logged in to an administrator account, I would double check to make sure that password expiration was disabled for each user account using the method in the tutorial on the first page.

psychotron · Jan 1, 2014

I have windows 7 home so I can't perform any of the tutorials on the first page, assuming the top of your thread here is the first page and that windows 7 home does not allow me to edit or see Local Users and Groups.

When I go to user accounts the only account active is my admin account. So I'm not sure what you are asking me to do.

Brink · Jan 1, 2014

Sorry, I was referring to using step 2 in OPTION TWO to double check for the user account that you are getting this password notification for.

psychotron · Jan 1, 2014

Yep. Done that.

After I type and hit enter in command prompt as admin it says "no instance (s) available" and I close prompt. So whether that did anything IDK.

Brink · Jan 1, 2014

It sounds like you may have made a mistake entering the command. Possible with the user name. Please go ahead and type net users in the elevated command prompt, press Enter, then do step 2 in OPTION TWO, and post back with a screenshot showing everything in the command prompt to see if anything may stand out.

psychotron · Jan 1, 2014

Thanks Brink. Problem was I was using 'Swen' as that's what I named my user account. After doing the new users prompt I saw Owner-1 and gave that a try and it worked.

Screenshots included.

Brink · Jan 1, 2014

You're most welcome.

Yep, that was the issue with no "Swen". Did you by chance rename "Owner-1" to have a display name of "Swen" instead?

dkotula · Apr 13, 2015

Can this be done at the group level? I would like for the administrator accounts to remain, but would like the group "Users" to expire. I am deploying local password policies and this is the only thing I have left to configure and deploy.

I have tried something like wmic group where name='Users' set PasswordExpires=True, but doesn't work.
Please enlighten me great one.
Thanks
Dave

dkotula · Apr 13, 2015

I have a script written by someone else that creates local user accounts, can something be added to make all new users have Set PasswordExpire=True. Sorry, I'm a little rusty in my coding these days.

Code:

$strComputer=$env:computername
#Input file required C:\utils\users.txt
ForEach ($user in (Import-CSV "C:\utils\CreateLocalAccounts\qtpusers.txt")){
  write-host $user.username
  write-host $user.password

#get-content "C:\utils\CreateLocalAccounts\qtpusers.txt" | ForEach-Object {
#Create the user account and assign a default password
$objOU = [adsi]"WinNT://."
$objUser = $objOU.Create("User", $user.username)
$objuser.setPassword($user.password)
$objuser.setinfo()
#Enable [User must change password at next logon]
#$objuser.PasswordExpired = 0
$objuser.PasswordLastSet = 0
$objuser.SetInfo()
#Add the User account to the local Administrators Group
$computer = [ADSI]("WinNT://" + $strComputer + ",computer") 
$group = $computer.psbase.children.find("Users")  
$group.Add("WinNT://" + $strComputer + "/" + $user.UserName)  

}

dkotula · Apr 15, 2015

Can a powershell wild card be used in Name=, for all users?
wmic path win32_useraccount where name='.*?' set passwordexpires=true

Pyprohly · Apr 16, 2015

dkotula said:
I have a script written by someone else that creates local user accounts, can something be added to make all new users have Set PasswordExpire=True. Sorry, I'm a little rusty in my coding these days.

Try tacking

Code:

wmic path Win32_UserAccount where Name="$user.username" set PasswordExpires=true

under the line

Code:

$group.Add("WinNT://" + $strComputer + "/" + $user.UserName)

dkotula said:
Can a powershell wild card be used in Name=, for all users?
wmic path win32_useraccount where name='.*?' set passwordexpires=true

You can use wildcards in WMIC but it works a little differently from PowerShell. To use wildcards in WMIC specify the "Like" operator instead of "=". Also, your wildcard symbols must abide to the WMI Query Language where percent symbols (%) represent any character and amount of characters, and an underscore (_) represents any single character.

Code:

wmic path Win32_UserAccount where "Name Like '%'" set PasswordExpires=true

But you don't even need wildcards for the task: wmic path Win32_UserAccount alone will list all users. So to set PasswordExpires=True for all user accounts, just run

Code:

wmic path Win32_UserAccount set PasswordExpires=True

dkotula · Apr 16, 2015

Works like a charm, thank you.
Do you know off hand what is used for "User must change password at next logon"?

Brink · Apr 16, 2015

dkotula said:
Works like a charm, thank you.
Do you know off hand what is used for "User must change password at next logon"?

It's to force the user to do just that when their password expires.

dkotula · Apr 16, 2015

Sorry, I should have specified more, I was wondering about the command to enable that feature.
It doesn't seem to be listed as an option in win32_userAccount Set, does the command reside somewhere else?

Password Expiration - Enable or Disable

Through Local Users and Groups Manager

Through an Elevated Command Prompt

New member

My Computer

Administrator

My Computer

New member

My Computer

Administrator

My Computer

New member

My Computer

Administrator

My Computer

New member

My Computer

Administrator

My Computer

New member

My Computer

Administrator

My Computer

New member

Attachments

My Computer

Administrator

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

Administrator

My Computer

New member

My Computer

Similar threads