Tech Tips / Windows NT / Security

Password expiration notification

As you know, security-minded administrators apply policies to user accounts that define password length, uniqueness, and expiration requirements. By default, Windows NT displays the password expiration notification 14 days in advance. If users complain that this is too little or too much time, you can edit the registry to change this default. Here's how:

Using Regedt32, navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinlogonNext and select Add Value from the Edit menu. Enter PasswordExpiryWarning in the Value Name field and set the Data Type to REG_DWORD. When the DWORD Editor appears, specify how many days in advance users are to be notified of their impending password expiration.

Note: We'll remind you that tweaking the registry is risky, so make sure you have a verified backup before you begin.

Contact Us | Authors | Subject Index | RSS Feeds

Copyright ©2007