Forum Discussion

Mark Roberts's avatar
Mark Roberts
Copper Contributor
Aug 16, 2017
Solved

Password Notifications

Hi there, 

 

All my users are saying they are not getting notified that there password is going to expire - Example - The baloon in outlook saying your password is going to expire in X number of days please change it. 

 

How do i get this to display properly? 

 

Thanks

  • Recently the guy who ones wrote the advice for password creation and regular changing it confessed that he was sorry for what he wrote. He said that he now advices to never force a password change (e.g. every 3 months).

     

    When you go to securescore.office.com you will find a similar advice from Microsoft:

     

    "While this is not the most intuitive recommendation, research has found that when periodic password resets are enforced, passwords become weaker as users tend to pick something weaker and then use a pattern of it for rotation. If a user creates a strong password: long, complex and without any pragmatic words present, it should remain just as strong is 60 days as it is today. It is Microsoft's official security position to not expire passwords periodically without a specific reason."

  • Recently the guy who ones wrote the advice for password creation and regular changing it confessed that he was sorry for what he wrote. He said that he now advices to never force a password change (e.g. every 3 months).

     

    When you go to securescore.office.com you will find a similar advice from Microsoft:

     

    "While this is not the most intuitive recommendation, research has found that when periodic password resets are enforced, passwords become weaker as users tend to pick something weaker and then use a pattern of it for rotation. If a user creates a strong password: long, complex and without any pragmatic words present, it should remain just as strong is 60 days as it is today. It is Microsoft's official security position to not expire passwords periodically without a specific reason."

  • Where are your users homed? And what kind of authentication do you have set up? In general, most organizations I've worked with setup an PowerShell script or similar that sends email notifications.

    • Mark Roberts's avatar
      Mark Roberts
      Copper Contributor

      Intresting.. i'm kind of a noob when i comes to powershell but i do have the Azure connection setup and working. 

      Is there a generic powershell script i can use to setup so my users rececive the email - I really like that option and I think it would be best for my orginization. 

Resources