In the policy settings, specify its name and uncheck the option Enforce maximum password age.Go to the System section, click on Password Settings Container and select New > Password Settings.Run the Active Directory Administration Center console.For example, you want to set the password never expires policy for the Domain Admins group. However, in modern versions of Windows Server, you can specify that passwords are not expired for specific users or groups using the Fine-Grained Password Policy. Prior to Windows Server 2008, you can configure only one domain password policy for all users. Set Custom Password Expiration Policy for Specific Users Only Using Fine-Grained Password Policy To change your password, press CTRL+ALT+DELETE and then click “Change a password” If the user’s password expires less than the specified number of days, he will see the following reminder after logging in to any domain computer:.Enable this policy and set the number of days (14 days by default) to start to notify the user of upcoming password expiration.

Find the policy named “ Interactive Logon: Prompt user to change password before expiration”.Expand the following GPO section: Computer Configuration > Policies > Windows Settings > Security Settings > Local Policies > Security Options.Switch to the GPMC console and edit the Default Domain Policy.You can get the user password expiration date with the command Get-ADUser from RSAT AD PowerShell module: Get-ADUser –Identity username –Properties msDS-UserPasswordExpiryTimeComputed|Select-Object -Property Name, can notify your Active Directory users when their password is about to expire using a special GPO option: You can change max password age or set it to 0 (in this case, user passwords in the domain are never expired).If the user password is older than this value, his password is considered expired The maximum password age in days is set in the “Maximum password age” parameter.Go to the GPO section: Computer Configuration > Windows Settings > Security Settings > Account Policies > Password Policy.Right-click on the Default Domain Policy and select Edit.Open the Group Policy Management Console (gpmc.msc).You can configure password expiration settings for domain users using Group Policy: Maximum Password Age in Default Domain Group Policy Until the user changes his password, he won’t be able to access domain resources and computers.

Set up a new password policy gpo