Windows Group Policy's

Group Policy Maximum Password Age

Windows Group Policy Name :- Maximum password age

Requirements :-

  • Work on any windows OS

Description :-

This security setting determines the period of time (in days) that a password can be used before the system requires the user to change it. You can set passwords to expire after a number of days between 1 and 999, or you can specify that passwords never expire by setting the number of days to 0. If the maximum password age is between 1 and 999 days, the Minimum password age must be less than the maximum password age. If the maximum password age is set to 0, the minimum password age can be any value between 0 and 998 days. Default: 42.

Note :-

Notepad

It is a security best practice to have passwords expire every 30 to 90 days, depending on your environment. This way, an attacker has a limited amount of time in which to crack a user's password and have access to your network resources.

Main Directory :-

Sub Directory :-

Policy Path :-

Local Computer Policy -> Computer Configuration -> Windows Settings -> Security Settings -> Account Policies -> Password Policy

Policy Path :-

configure-group policy - Maximum password age

Policy Path :-

output-group policy - Maximum password age

Note :-

Notepad

After changing group policy options, you need to update group policy. If you do not update group policy then settings will not effect. To update it just simply type below command and also sample image is shown.

Command :-

gpupdate /force

output-update-group-policy
Notepad

In about command we used "/force" option, this will help up to update policy options forcefully.