Sign up for Office 365
Learn more about Office 365
How can an admin change the length of time before a password expires?
I can easily find how to disable password expiration altogether, but what if a client wants passwords to expire every 60 days, or 120 days for example, instead of 90 days?
All of my searching leads me to the Windows PowerShell Cmdlets for Office 365 page here - http://onlinehelp.microsoft.com/en-us/office365-enterprises/hh125002.aspx. Specifically, to the 'Set-MSOLPasswordPolicy command.
But my PowerShell doesn't include either 'Set-MSOLPasswordPolicy' or 'Get-MSOLPasswordPolicy'. I've tried launching PowerShell using both the PowerShell included with Win 7 and also the latest version of PowerShell, downloaded from here: http://onlinehelp.microsoft.com/en-us/office365-enterprises/ff652560.aspx#BKMK_DownloadTheMOSIdentityFederationTool.
I've tried connecting with the Connect-MSOLService, and also tried importing the ExchangeOnline modules.
I can't find any PowerShell environment that includes the Password Policy commands. How can I access them?
Alternatively, how can I edit the default password policy?
Thanks for the feedback.
I am 99% sure you cannot make any changes to the Office365 Password policy. As you found you can set passwords to never expire. The reason for not being able to change the Password policy is that Office 365 is a shared enviornment and changing the Policy could affect other tenants/companies using it.
You CAN'T manage password policy, except disable password expiration, with Office 365 and PowerShell
The only way to manage password policy (complexity, expiration duration...) is to use ADFS (Active Directory Federation Services) which will transfer the password management to your internal AD
Regarding the PowerShell to manage Office 365, you must download it from here onlinehelp.microsoft.com/.../ff652560.aspx ; there is no PowerShell included on Windows neither Exchange which allow Office 365 CMDLets
Thanks for all the posting. Is there any other help needed here?
Thanks Reken. If there is no way to do it, then I'llhave to live with that.
Nothing else is needed, thanks.
You might have found this by now, but there seems to be a way to do this now
Set-MsolPasswordPolicy -ValidityPeriod <days> -NotificationDays <days> -DomainName contoso.com
But the Set-MsolPasswordPolicy cmdlet was not present in the "Microsoft Online Services Module for Windows PowerShell" I downloaded in March, but it is in the one I downloaded today.
Steps I hade to take:
Reinstall same files from:
I used x64 versions.
Then start powershell with Microsoft Online Services Module for Windows PowerShell from start menu.
Now you should be able to set
I have not found this documented, but it seems 1000 days is max for ValidityPeriod
That's wonderful news!
Is there a way to verify if the changes has been made ?
With BPOS we could easily see when the password will expire.
Any command for O365
Are you meaning to see the left days before the password expires? Install the latest Sign-In Assistant will enable the password expiry notification. To do this, follow these steps:
In addition, please refer to the following article to get more information about this:
Is this still not possible to disable the Password Poilcy expiration time from the portal administration level, as a client has users that only connect to O365 via outlook desktop client on desktops. as such they are getting locked out every 90 days and I have to reset them which is nuts. I need to either disable this policy completely or have them emailed with notification without them having to install more things on their machines nor log into the portal.
Disabling password policy expiration time is not available in the portal. However, administrators are allowed to change the password expiration days in Service Settings > Passwords, and the maximum value can be up to 730 days. Please see this article:
Change how often passwords expire