No one has responded to this discussion for at least a year, so this information may be out of date. If you're looking for information about this topic, please search for a more recent discussion or post a new question.

O365 Passwords - change expiration policy

  • 7 Followers
  • 11 Replies |
  • This post has 2 verified answers |
Answered (Verified) This question is answered

How can an admin change the length of time before a password expires?

 

I can easily find how to disable password expiration altogether, but what if a client wants passwords to expire every 60 days, or 120 days for example, instead of 90 days?

 

All of my searching leads me to the Windows PowerShell Cmdlets for Office 365 page here - http://onlinehelp.microsoft.com/en-us/office365-enterprises/hh125002.aspx. Specifically, to the 'Set-MSOLPasswordPolicy command.

 

But my PowerShell doesn't include either 'Set-MSOLPasswordPolicy' or 'Get-MSOLPasswordPolicy'. I've tried launching PowerShell using both the PowerShell included with Win 7 and also the latest version of PowerShell, downloaded from here: http://onlinehelp.microsoft.com/en-us/office365-enterprises/ff652560.aspx#BKMK_DownloadTheMOSIdentityFederationTool.

 

I've tried connecting with the Connect-MSOLService, and also tried importing the ExchangeOnline modules.

 

I can't find any PowerShell environment that includes the Password Policy commands. How can I access them?

 

Alternatively, how can I edit the default password policy?

 

Thanks,
Steve

  • Post Points: 50
Verified Answer
  • Steve,

    I am 99% sure you cannot make any changes to the Office365 Password policy.  As you found you can set passwords to never expire.  The reason for not being able to change the Password policy is that Office 365 is a shared enviornment and changing the Policy could affect other tenants/companies using it.

    Sean McNeill

    Blog: http://office365evangelist.com/

    Microsoft MVP - Office 365

    • Top 100 Contributor
    • Post Points: 0
  • Hello

    You CAN'T manage password policy, except disable password expiration, with Office 365 and PowerShell

    The only way to manage password policy (complexity, expiration duration...) is to use ADFS (Active Directory Federation Services) which will transfer the password management to your internal AD

    Regarding the PowerShell to manage Office 365, you must download it from here onlinehelp.microsoft.com/.../ff652560.aspx ; there is no PowerShell included on Windows neither Exchange which allow Office 365 CMDLets

    Benoit HAMET

    Senior Solutions Architect

    MVP Office 365 - MCITP Office 365 - Microsoft Community Contributor

    Blog - Twitter

    • Top 75 Contributor
    • Post Points: 0
All Replies
  • Steve,

    I am 99% sure you cannot make any changes to the Office365 Password policy.  As you found you can set passwords to never expire.  The reason for not being able to change the Password policy is that Office 365 is a shared enviornment and changing the Policy could affect other tenants/companies using it.

    Sean McNeill

    Blog: http://office365evangelist.com/

    Microsoft MVP - Office 365

    • Top 100 Contributor
    • Post Points: 0
  • Hello

    You CAN'T manage password policy, except disable password expiration, with Office 365 and PowerShell

    The only way to manage password policy (complexity, expiration duration...) is to use ADFS (Active Directory Federation Services) which will transfer the password management to your internal AD

    Regarding the PowerShell to manage Office 365, you must download it from here onlinehelp.microsoft.com/.../ff652560.aspx ; there is no PowerShell included on Windows neither Exchange which allow Office 365 CMDLets

    Benoit HAMET

    Senior Solutions Architect

    MVP Office 365 - MCITP Office 365 - Microsoft Community Contributor

    Blog - Twitter

    • Top 75 Contributor
    • Post Points: 0
  • Hi,

    Thanks for all the posting. Is there any other help needed here?

    Thanks,
    Reken Liu

    • Top 25 Contributor
    • Male
    • Post Points: 0
  • Thanks Reken. If there is no way to do it, then I'llhave to live with that.

    Nothing else is needed, thanks.

    -- Steve

    • Not Ranked
    • Post Points: 0
  • You might have found this by now, but there seems to be a way to do this now

     

    Set-MsolPasswordPolicy -ValidityPeriod <days> -NotificationDays <days> -DomainName contoso.com

     

    But the Set-MsolPasswordPolicy cmdlet was not present in the "Microsoft Online Services Module for Windows PowerShell" I downloaded in March, but it is in the one I downloaded today.

     

    Steps I hade to take:

     

    Uninstall:

    • Microsoft Online Services Module for Windows PowerShell
    • Microsoft Online Services Sign-In Assistant (IDCRL7)
    • Reboot

    Reinstall same files from:

    http://onlinehelp.microsoft.com/en-us/office365-enterprises/hh124998.aspx#BKMK_install

    I used x64 versions.

     

     Then start powershell with Microsoft Online Services Module for Windows PowerShell from start menu.

     

    Run:

    • get-module MSOnline
    • Connect-MsolService

    Now you should be able to set

    Set-MsolPasswordPolicy -ValidityPeriod <days> -NotificationDays <days> -DomainName contoso.com

     

    I have not found this documented, but it seems 1000 days is max for ValidityPeriod

     

    //Johan

     

    • Not Ranked
    • Post Points: 0
  • That's wonderful news!

    Thanks Johan.

    -- Steve

    • Not Ranked
    • Post Points: 0
  • Hello,

    Is there a way to verify if the changes has been made ?

    With BPOS we could easily see when the password will expire.

    Any command for O365

    • Not Ranked
    • Post Points: 0
  • Hi Sumesh84,

    Are you meaning to see the left days before the password expires? Install the latest Sign-In Assistant will enable the password expiry notification.  To do this, follow these steps:

    1. Sign in to the Office 365 portal (https://portal.microsoftonline.com/).
    2. On the Home page, in the pane on the right side, click Downloads, and then under Set up and configure your Office desktop apps, click Set up.

    In addition, please refer to the following article to get more information about this:

    http://support.microsoft.com/kb/2630976

    Thanks,
    Reken Liu

    • Top 25 Contributor
    • Male
    • Post Points: 0
  • Thanks

    • Not Ranked
    • Post Points: 0
  • Is this still not possible to disable the Password Poilcy expiration time from the portal administration level, as a client has users that only connect to O365 via outlook desktop client on desktops. as such they are getting locked out every 90 days and I have to reset them which is nuts. I need to either disable this policy completely or have them emailed with notification without them having to install more things on their machines nor log into the portal.

    • Not Ranked
    • Post Points: 0
  • Hi hudson-gore,

    Disabling password policy expiration time is not available in the portal. However, administrators are allowed to change the password expiration days in Service Settings > Passwords, and the maximum value can be up to 730 days. Please see this article:

    Change how often passwords expire
    http://office.microsoft.com/en-001/office365-suite-help/change-how-often-passwords-expire-HA102816534.aspx

    Thanks,
    Reken Liu

    • Top 25 Contributor
    • Male
    • Post Points: 0
Page 1 of 1 (12 items)