Forum Discussion
Password change nagging
When working in a browser, O365 is sending a notification that the user's password is about to expire and needs to be changed. This is great, but if they dismiss the reminder, and don't change password (they still have days until expiry), whenever they interact with the web page, such as select something in SharePoint online, the reminder comes back. I'm happily telling the users that the solution to this issue is to simply change their password, but is there a way of dealing with the root cause? The frequency of the reminders is somewhat ridiculous.
Lloyd Adams Did you ever get satisfaction on this issue? I have seen this problem in my environment and have yet to devise a cure..
It goes a step further here... The user changed his password using Ctrl-Alt-Delete, and not using the link provided through that message reminder. Since changing the password it still annoyingly pops up even after clearing the notifications.. It is now 4 days since the day the password expired and it is still stating that his password is expiring soon and needs to be changed.
PsychicIT- Either the issue went away, or the user got used to it, so I can't help you any further I'm afraid.
Hello Lloyd Adams,
There is, you can manage your password policy for your organization.
It is probably easiest to just edit this through the admin center:
As a Global Admin:
Settings -> Security and Privacy
There will be a password policy there. You can change how long a password is good for, as well as how much in advance you notify users.
So you could make the password stay good for 180 days instead of 90 for instance. Or notify them 5 days in advance instead of 14 (or both).
Just keep in mind the longer you allow passwords to be valid, the greater the security risk of a compromise. Its always a balancing act that each admin has to walk to decide what is right for their organization.
Goodluck!
Adam
Sorry Adam Ochs but I think you miss the point.
We have password life, notification time etc. set as we want.
The problem is that if you dismiss the reminder, it pops right back up again the next time you do something in O365. If you spend a lot of time in O365 web apps, you cannot get rid of this pop up. You should at least be able to dismiss it for a day.
That's the intention, the popup is deliberately designed to be as annoying as possible, so you don't miss it. The one about expiring federation certificate is using the same "method", so are some of the EAC ones.
You can always leave feedback on the portal or UserVoice and request to have it changed :)
