Announcement

Collapse
No announcement yet.

xp home edition password expire!

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • xp home edition password expire!

    hi everybody im italian from bologna and i junior admin

    I've a question. MY customer has a xp home edition and thare are 4 user profile
    I want to manage theri password with policy like lenght,, min age max age..etc..
    Now by command line i tired net accounts and net users
    i don0t konw for why reasen un user has the password expire set to NO so he can't change password after tot day
    this is what i se with ne user and you can see also the difference..sorry but the output is in italian..

    C:\Documents and Settings\Proprietario>net user admin
    Nome utente admin
    Nome completo admin
    Commento
    Commento utente
    Codice del paese 000 (Predefinito del sistema)
    Account attivo Sì
    Scadenza account Mai

    Ultima impostazione password 11/13/2004 11:15 PM
    Scadenza password 11/23/2004 11:15 PM
    Password cambiabile 11/13/2004 11:15 PM
    Password richiesta No
    L'utente può cambiare la password Sì

    Workstation consentite Tutti
    Script di accesso
    Profilo utente
    Home directory
    Ultimo accesso 11/16/2004 7:50 PM

    Ore di accesso consentito Tutti

    Appartenenze al gruppo locale *Administrators
    *Users
    Appartenenze al gruppo globale *Nessuno
    Esecuzione comando riuscita.




    C:\Documents and Settings\Proprietario>net user utente
    Nome utente utente
    Nome completo utent
    Commento
    Commento utente
    Codice del paese 000 (Predefinito del sistema)
    Account attivo Sì
    Scadenza account Mai

    Ultima impostazione password 11/16/2004 7:55 PM
    Scadenza password Mai
    Password cambiabile 11/16/2004 7:55 PM
    Password richiesta No
    L'utente può cambiare la password Sì

    Workstation consentite Tutti
    Script di accesso
    Profilo utente
    Home directory
    Ultimo accesso 11/16/2004 8:09 PM

    Ore di accesso consentito Lunedì 9:00 AM - 11:00 PM
    Martedì 9:00 AM - 11:00 PM
    Mercoledì 9:00 AM - 11:00 PM
    Giovedì 9:00 AM - 11:00 PM
    Venerdì 9:00 AM - 11:00 PM

    Appartenenze al gruppo locale *Users
    Appartenenze al gruppo globale *Nessuno
    Esecuzione comando riuscita.



    you see that "Scadenza password" is "password expires"
    user "admin" and "utente" are administrator but one has "Scadenza password" set to yes (and is what i want) and other has no..


    how i can resolve my problem?
    thanks in advance

  • #2
    anyone can help me?
    friday i'll go to my costumer..
    i hope my question is clear.
    Thanks again..very intersting this forum..!

    Comment


    • #3
      not sure if XP home has group policies,cause i never worked with it... (but i guess it has)
      so have a look at this picture (created on XP Pro)
      just start de GPedit.msc
      Last edited by Dumber; 17th December 2008, 14:46.
      Marcel
      Technical Consultant
      Netherlands
      http://www.phetios.com
      http://blog.nessus.nl

      MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
      "No matter how secure, there is always the human factor."

      "Enjoy life today, tomorrow may never come."
      "If you're going through hell, keep going. ~Winston Churchill"

      Comment


      • #4
        thanks dumber..but home edition does not have group policy..you must use command liune parameter..or registry.. but i can't find where is the commmad for expire..

        Comment


        • #5
          ok,

          do you then mean:

          Code:
          C:\>net accounts
          Force user logoff how long after time expires?:       Never
          Minimum password age (days):                          0
          Maximum password age (days):                          42
          Minimum password length:                              0
          Length of password history maintained:                None
          Lockout threshold:                                    Never
          Lockout duration (minutes):                           30
          Lockout observation window (minutes):                 30
          Computer role:                                        WORKSTATION
          The command completed successfully.
          
          C:\>net accounts /?
          The syntax of this command is:
          
          
          NET ACCOUNTS
          [/FORCELOGOFF:{minutes | NO}] [/MINPWLEN:length]
                       [/MAXPWAGE:{days | UNLIMITED}] [/MINPWAGE:days]
                       [/UNIQUEPW:number] [/DOMAIN]
          so if you want a maximum password age of 40 days en a minimum length of 8 and a minimum pasword age of 2 and a unique password of 20 then i think:
          Code:
          net acccounts /maxpwage:40 /minplwen:8 /minpwage:2 /uniquepw:20
          (do you really havn't then local security settings following this: Start/Programs/Administrative Tools/Local Security Policy/Account Policies/Password Policy)[/code]
          Marcel
          Technical Consultant
          Netherlands
          http://www.phetios.com
          http://blog.nessus.nl

          MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
          "No matter how secure, there is always the human factor."

          "Enjoy life today, tomorrow may never come."
          "If you're going through hell, keep going. ~Winston Churchill"

          Comment


          • #6
            oh,

            mabe this is also o nice document to read:
            http://labmice.techtarget.com/articl...ychecklist.htm
            Marcel
            Technical Consultant
            Netherlands
            http://www.phetios.com
            http://blog.nessus.nl

            MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
            "No matter how secure, there is always the human factor."

            "Enjoy life today, tomorrow may never come."
            "If you're going through hell, keep going. ~Winston Churchill"

            Comment


            • #7
              Dumber, the problem is in the users setting.
              I don't know why an user has the value password expire YES
              and another NO..if you type net users "name" you can see password expire value...so you know if i have no password expire i can't change password automatically..
              i want change this field..thanks for the link!

              Comment


              • #8
                isnt it that a password never expires the gpo overruled?
                Marcel
                Technical Consultant
                Netherlands
                http://www.phetios.com
                http://blog.nessus.nl

                MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                "No matter how secure, there is always the human factor."

                "Enjoy life today, tomorrow may never come."
                "If you're going through hell, keep going. ~Winston Churchill"

                Comment


                • #9
                  Re: xp home edition password expire!

                  Originally posted by vacco
                  thanks dumber..but home edition does not have group policy..you must use command liune parameter..or registry.. but i can't find where is the commmad for expire..
                  If boot up in safe mode you will be able to access the group policy and change the password expiration time in account policies. that should work for you.

                  olozano

                  Comment


                  • #10
                    Re: xp home edition password expire!

                    you could also try using control userpasswords2.

                    Go to Start, Run and type control userpasswords2 and press enter.

                    This will open the User Accounts Box which in turn will lead you to the advanced user management options where you can set the correct options.

                    Or you could Right Click My Computer and Select Manage. This will open up the Computer Management screen which again will allow you to edit user accounts.
                    Last edited by wullieb1; 26th September 2006, 08:32.

                    Comment

                    Working...
                    X