Forum Discussion
Password expiry for different groups
Hi all,
Not sure if this is quite obvious but I cant find out how to set different password policies based on the type of user, so I would like all staff passwords to expire say every 30 days and students to expire ever 60.
Can this be done?
Hi AB21805,
I don't know if your users are synced from an On-premises AD but then you can set different password policies at Active directory administrative center
if you have only a cloud tenant, you can enable the ADDS services and use the following config:
Create and use password policies in Azure AD Domain Services | Microsoft DocsIf you have an on-premises tenant you can use the "Create a custom password policy" step in above blogpost also within your on-prem AD.
You can see some information about Azure AD password policies here.
Self-service password reset policies - Azure Active Directory | Microsoft Docs
Otherwise you have to use the method that Rudy_Ooms_MVP already mentioned.
Kind regards,
Rene
2 Replies
- Mr_HelaasSteel Contributor
Hi AB21805,
I don't know if your users are synced from an On-premises AD but then you can set different password policies at Active directory administrative center
if you have only a cloud tenant, you can enable the ADDS services and use the following config:
Create and use password policies in Azure AD Domain Services | Microsoft DocsIf you have an on-premises tenant you can use the "Create a custom password policy" step in above blogpost also within your on-prem AD.
You can see some information about Azure AD password policies here.
Self-service password reset policies - Azure Active Directory | Microsoft Docs
Otherwise you have to use the method that Rudy_Ooms_MVP already mentioned.
Kind regards,
Rene
- Mmm as far as I know... you can only target a domainname with powershell to configure the password policy
Set-MsolPasswordPolicy -DomainName abc.com -ValidityPeriod 1000 -NotificationDays 14