Forum Discussion
Password Notifications
- Aug 18, 2017
Recently the guy who ones wrote the advice for password creation and regular changing it confessed that he was sorry for what he wrote. He said that he now advices to never force a password change (e.g. every 3 months).
When you go to securescore.office.com you will find a similar advice from Microsoft:
"While this is not the most intuitive recommendation, research has found that when periodic password resets are enforced, passwords become weaker as users tend to pick something weaker and then use a pattern of it for rotation. If a user creates a strong password: long, complex and without any pragmatic words present, it should remain just as strong is 60 days as it is today. It is Microsoft's official security position to not expire passwords periodically without a specific reason."
Intresting.. i'm kind of a noob when i comes to powershell but i do have the Azure connection setup and working.
Is there a generic powershell script i can use to setup so my users rececive the email - I really like that option and I think it would be best for my orginization.
Again, depends on where your users are homed and the type of auth user. You can find example script for cloud-authored users here: http://titlerequired.com/2015/01/23/office-365-email-password-reminder/
- Mark RobertsAug 17, 2017Copper Contributor
Could you explain more about "where your users are homed and the type of auth user"
Not sure where I can get this info your requesting.
Thx
Mark
- Aljohn BonifacioAug 17, 2017Iron Contributor
To add on Vasil's sample powershell script for password notification, you can also use this as a reference: https://gallery.technet.microsoft.com/office/Password-Expire-Office-365-4e0b0459
- Mark RobertsAug 17, 2017Copper Contributor
Thats perfect! I now just have a couple questions.
1. Do I just have to run the powershel script once to get this working?
2. For the variable expireindays do I change the 0 to 14? (($daystoexpire -ge "0")
4. For the date Variable is this correct = $today = (get-date -format ddMMyyyy)
Thanks
Mark