Windows 10: Unable to enforce password policy on multiple machines

I have set the password policy in Windows Tools > Local Security Policy > Security Settings > Account Policies > Password Policy as per the image below on multiple machines earlier in Windows 10 and now in Windows 11.However, none of the machines ask the user [including me] to change their windows account password after 100 days. Almost a year has passed since the policy was set. The users have local administrator accounts.I have read a few articles and all mention just setting the options and no other steps. Therefore, I believe the above settings should work. Is there any other o

:)

 

Domain Password Policy Update User Impact

Hi there,

I'm looking for some guidance on what the user impact would be if the password policy GPO was updated on the domain.

I'm looking to request from the users to update their passwords based on the password policies without enforcing them to change it upon next logon. Based on the existing policy and updated policies mentioned below, would there be any immediate impact that would force the users to change their passwords?

Any help would be appreciated.

Thanks!

The current password policy (settings in BOLD will be updated):

• Enforce Password History: 5 Passwords remembered
  
• Max Password Age: 90 days
  
• Minimum Password Age: 0 days
  
• Minimum Password Length: 11 characters
  
• Password Must meet complexity requirements: Enabled
  

• Account lockout threshold: 6
  
• Account lockout duration: 30 minutes
  
• Reset account lockout counter after: 30 minutes
  

The updated password policy:

• Enforce Password History: 5 Passwords remembered
  
• Max Password Age: 0 days (no expiry)
  
• Minimum Password Age: 1 day
  
• Minimum Password Length: 11 characters
  
• Password Must meet complexity: Disabled
  

• Account lockout threshold: 10
  
• Account lockout duration: 15 minutes
  
• Reset account lockout counter after: 15 minutes
  

 

Accessing Password Policy in Windows 10

Hi,

Thank you for posting your query on Microsoft Community.

I understand that you would like to set Password policy. We will assist you to resolve the issue.

To assist you better, I would like to know what happened when you try to change the policy. Did you get any error message?

I suggest you to follow the below steps and check if it helps.

You must log in as administrator to access these settings.

• 
  Press Windows key + R and type secpol.msc
  and press enter.
  
• 
  The Local Security Policy window will open. Now from the left pane, choose
  Password Policy from under Account Policies.
  
• 
  On the right side, choose Maximum password age.
  
  
• 
  If you wish the password to never Expire, set the value to
  0.
  

Hope the information helps. Let us know if you need further assistance. We will be happy to help.

Thank you.

 

Enforced security Policies

Same behavior on HTC 7 Mozart. It seems that it does not matter which device you have

Synchronisation works when you do not force alphanumeric passwords. Also you have to "allow devices that don't fully support these policies to synchronize".

But: After policy is enforced on your device, the maximum screen time out is five minutes. After this time you have to enter your password. This is too much security i think. On older Windows mobile phones you could configure up to 24 hours. So entgering
password once a day was ok, but entering password for almost every time you use your phone is kind of anoying.

Martin