Issues Regarding Password Never Expires

Issues Regarding Password Never Expires

There are a couple of things you need to worry about when setting users to 'Password Never Expires' in Office 365.
One of these is the interaction with DirSync accounts - where the  'Password Never Expires' doesn't truly work anymore.

 But if you have set this on a tenant before that change by Microsoft then you may also run into another issue.

Microsoft has recently made some updates and users that have 'Password Never Expires' set to $True will no longer be able to change their password via OWA/portal.
The solution is rather simple by changing the account from:

Set-MSOLUser -PasswordNeverExpires $true
Set-MSOLUser -PasswordNeverExpires $false

but you should likely do this on smaller number of users.

If you perform this on a large number of users or the whole tenant you need to be aware that you could have a mass expiration of passwords if they are older than the maximum password age setting.

With regards to the domain password policy; which is different. For that  be aware that it doesn't apply to subdomains.

Leave a Comment
  • Please add 5 and 2 and type the answer here:
  • Post
Wiki - Revision Comment List(Revision Comment)
Sort by: Published Date | Most Recent | Most Useful
Comments
  • Naomi  N edited Revision 2. Comment: Minor edit

  • Richard Mueller edited Revision 1. Comment: Fixed typos, added tags

Page 1 of 1 (2 items)
Wikis - Comment List
Sort by: Published Date | Most Recent | Most Useful
Posting comments is temporarily disabled until 10:00am PST on Saturday, December 14th. Thank you for your patience.
Comments
  • Richard Mueller edited Revision 1. Comment: Fixed typos, added tags

  • Naomi  N edited Revision 2. Comment: Minor edit

Page 1 of 1 (2 items)