Modify Active Directory Computer Password Maximum Age

Hello,

You can modify maximum computer password age with GPO :

Computer Configuration, Policies, Security Settings, Local Policies, Security Options, “Domain Member : Maximum machine account password age” :
MachineMaxPwdAgeGPO
Or you can use the registry :

Set-ItemProperty -Path HKLM:SYSTEMCurrentControlSetServicesNetlogonParameters -Name MaximumPasswordAge -Value 150

You can check the value applied with :

(Get-ItemProperty -Path HKLM:SYSTEMCurrentControlSetServicesNetlogonParameters -Name MaximumPasswordAge).MaximumPasswordAge

KB154501

Leave a Reply