Published by


Brink's Avatar
Administrator

Posts: 25,232

Show Printable Version 


How to Enable or Disable Password Expiration for Local Accounts in Windows 10

information   Information
Password expiration is a feature in Windows that forces a local account on the PC to change their passwords when a specified maximum (42 days by default) and minimum ( 0 days by default) password age has been reached.

This tutorial will show you how to enable or disable password expiration for specific local accounts in Windows 10.

You must be signed in as an administrator to enable or disable password expiration.

Note   Note
Microsoft accounts will not be affected by this password expiration feature.


CONTENTS:
  • Option One: To Enable or Disable Password Expiration for Local Account(s) using Local Users and Groups
  • Option Two: To Enable or Disable Password Expiration for Local Account(s) using Command Prompt


EXAMPLE: "Your password has expired and must be changed" at sign-in
Name:  Password_expiration_at_sign-in-1.jpg
Views: 2105
Size:  52.4 KB Name:  Password_expiration_at_sign-in-2.jpg
Views: 2103
Size:  50.7 KB
Name:  Password_expiration_at_sign-in-3.jpg
Views: 2095
Size:  52.9 KB Name:  Password_expiration_at_sign-in-4.jpg
Views: 2081
Size:  50.2 KB






Enable or Disable Password Expiration for Local Accounts in Windows 10 OPTION ONE Enable or Disable Password Expiration for Local Accounts in Windows 10
To Enable or Disable Password Expiration for Local Account(s) using Local Users and Groups

Note   Note
Local Users and Groups is only available in the Windows 10 Pro, Enterprise, and Education editions.

All editions can use Option Two below.


1. Press the Win+R keys to open Run, type lusrmgr.msc into Run, and click/tap on OK to open Local Users and Groups.

2. Click/tap on Users in the left pane of Local Users and Groups. (see screenshot below step 3)

3. Right click or press and hold on the name (ex: "Brink2") of the local account you want, and click/tap on Properties. (see screenshot below)

Name:  Password_expiration_lusrmgr-1.jpg
Views: 2093
Size:  50.0 KB

4. Do step 5 (enable) or step 6 (disable) below for what you want to do.


 5. To Enable Password Protection for Local Account

A) In the General tab, uncheck the Password never expires box, and click/tap on OK. (see screenshot below)
Note   Note
Password never expires will be grayed out if the User must change password at next logon box is checked.


B) If you like, you can change the maximum and minimum password age for local accounts.

C) When finished, go to step 7 below.

Name:  Password_expiration_lusrmgr-3.png
Views: 2090
Size:  26.4 KB


 6. To Disable Password Protection for Local Account

Note   Note
This is the default setting.


A) In the General tab, check the Password never expires box, click/tap on OK, and go to step 7 below. (see screenshot below)
Note   Note
Password never expires will be grayed out if the User must change password at next logon box is checked.


Name:  Password_expiration_lusrmgr-2.png
Views: 2094
Size:  26.6 KB

7. Repeat step 3 above if you would like to enable or disable password expiration for another local account.

8. When finished, you can close Local Users and Groups if you like.






Enable or Disable Password Expiration for Local Accounts in Windows 10 OPTION TWO Enable or Disable Password Expiration for Local Accounts in Windows 10
To Enable or Disable Password Expiration for Local Account(s) using Command Prompt

1. Open an elevated command prompt.

2. Do step 3 (enable) or step 4 (disable) below for what you want to do.


 3. To Enable Password Protection for Local Account

A) Enter the command below into the elevated command prompt, and press Enter. (see screenshot below)

wmic UserAccount where Name="user name" set PasswordExpires=True

Note   Note
Substitute user name in the command above with the actual user name of the local account you want to enable password expiration.


B) If you like, you can change the maximum and minimum password age for local accounts.

C) When finished, go to step 5 below.

Name:  Enable_password_expiration_command.jpg
Views: 2095
Size:  28.5 KB


 4. To Disable Password Protection for Local Account(s)

Note   Note
This is the default setting.


A) Enter the command you want below into the elevated command prompt, press Enter, and go to step 5 below. (see screenshot below)

(Apply to all accounts)
wmic UserAccount set PasswordExpires=False

OR

(Apply to specific local account)
wmic UserAccount where Name="user name" set PasswordExpires=False

Note   Note
Substitute user name in the command above with the actual user name of the local account you want to disable password expiration.


Name:  Disable_password_expiration_command.jpg
Views: 2090
Size:  28.9 KB


5. When finished, you can close the elevated command prompt if you like.


That's it,
Shawn


Related Tutorials