Modify Active Directory Computer Password Maximum Age


You can modify maximum computer password age with GPO :

Computer Configuration, Policies, Security Settings, Local Policies, Security Options, “Domain Member : Maximum machine account password age” :
Or you can use the registry :

Set-ItemProperty -Path HKLM:SYSTEMCurrentControlSetServicesNetlogonParameters -Name MaximumPasswordAge -Value 150

You can check the value applied with :

(Get-ItemProperty -Path HKLM:SYSTEMCurrentControlSetServicesNetlogonParameters -Name MaximumPasswordAge).MaximumPasswordAge


Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.