Affiliate Disclosure: By buying the products we recommend, you help keep the lights on at MakeUseOf. Read more.
Did you know that you can force Windows users to change their passwords?
By default, password expiration is disabled, but you can turn it on easily. There are two methods for doing this based on whether you have the Home or Pro editions of Windows, and these processes will work on Windows 7, 8, and 10.
On Windows Pro
Professional users have a convenient method for this change. Type management into the Start Menu and open the Computer Management utility. Select Local Users and Groups on the left side, and expand Users to change the expiration policy for individual accounts.
Right-click the user you want to change, choose Properties, and under the General tab, uncheck Password never expires. Next, we need to change the password policy. Type Local security policy into the Start Menu to launch that tool, then expand Account Policies > Password Policy.
Here you can change the amount of time after which a user must change his password (Maximum password age), prevent users from using the same password multiple times (Enforce password history), set a minimum password length, and enforce complexity (passwords must contain three of the four: lowercase letters, uppercase letters, numbers, and symbols).
After the number of days you specify, the user will be forced to change his password before logging in.
On Windows Home
Windows Home users can perform the same process, but they must do it through the command prompt, as the utilities used in the above method aren’t present in Windows Home.
Open an administrator command prompt by typing cmd into the Start Menu, right-clicking its entry, and choosing Run as Administrator.
To enable password expiration for a single user account, type this line, replacing USER with the username of the account:
wmic UserAccount where Name='USER' set PasswordExpires=True
If you want passwords to expire for all user accounts on the machine, use this command instead:
wmic UserAccount set PasswordExpires=True
After this, log into the account that you want to change the password expiration time for. Open an administrator command prompt again, then type this command, replacing 42 (the default) with the number of days before a password expires:
net accounts /maxpwage:42
Note that in Windows 8 and 10, these changes will not affects users who sign in with a Microsoft account. You’ll need to sign in with a local account instead.
Do you need to force password expiration on your computer’s users? Let us know if this helped you down in the comments!
Image Credit: Markus Gann via Shutterstock