Enable or Disable Password Expiration for Local Accounts in Windows 10  

    Enable or Disable Password Expiration for Local Accounts in Windows 10

    Enable or Disable Password Expiration for Local Accounts in Windows 10

    How to Enable or Disable Password Expiration for Local Accounts in Windows 10
    Published by Category: User Accounts
    25 Apr 2021
    Designer Media Ltd

    How to Enable or Disable Password Expiration for Local Accounts in Windows 10


    Password expiration is a feature in Windows that forces a local account on the PC to change their passwords when a specified maximum (42 days by default) and minimum ( 0 days by default) password age has been reached.

    This tutorial will show you how to enable or disable password expiration for specific local accounts in Windows 10.

    You must be signed in as an administrator to enable or disable password expiration.

    Microsoft accounts will not be affected by this password expiration feature.



    Contents

    • Option One: To Enable or Disable Password Expiration for Local Account(s) using Local Users and Groups
    • Option Two: To Enable or Disable Password Expiration for Local Account(s) using Command Prompt



    EXAMPLE: "Your password has expired and must be changed" at sign-in
    Enable or Disable Password Expiration for Local Accounts in Windows 10-password_expiration_at_sign-1.jpg Enable or Disable Password Expiration for Local Accounts in Windows 10-password_expiration_at_sign-2.jpg
    Enable or Disable Password Expiration for Local Accounts in Windows 10-password_expiration_at_sign-3.jpg Enable or Disable Password Expiration for Local Accounts in Windows 10-password_expiration_at_sign-4.jpg






    OPTION ONE

    To Enable or Disable Password Expiration for Local Account(s) using Local Users and Groups


    Local Users and Groups is only available in the Windows 10 Pro, Enterprise, and Education editions.

    All editions can use Option Two below.


    1 Press the Win + R keys to open Run, type lusrmgr.msc into Run, and click/tap on OK to open Local Users and Groups.

    2 Click/tap on Users in the left pane of Local Users and Groups. (see screenshot below step 3)

    3 Right click or press and hold on the name (ex: "Brink2") of the local account you want, and click/tap on Properties. (see screenshot below)

    Enable or Disable Password Expiration for Local Accounts in Windows 10-password_expiration_lusrmgr-1.jpg

    4 Do step 5 (enable) or step 6 (disable) below for what you want to do.


    5 To Enable Password Expiration for Local Account

    A) In the General tab, uncheck the Password never expires box, and click/tap on OK. (see screenshot below)

    Password never expires will be grayed out if the User must change password at next logon box is checked.


    B) If you like, you can change the maximum and minimum password age for local accounts.

    C) When finished, go to step 7 below.

    Enable or Disable Password Expiration for Local Accounts in Windows 10-password_expiration_lusrmgr-3.png


    6 To Disable Password Expiration for Local Account

    This is the default setting.

    A) In the General tab, check the Password never expires box, click/tap on OK, and go to step 7 below. (see screenshot below)

    Password never expires will be grayed out if the User must change password at next logon box is checked.

    Enable or Disable Password Expiration for Local Accounts in Windows 10-password_expiration_lusrmgr-2.png


    7 Repeat step 3 above if you would like to enable or disable password expiration for another local account.

    8 When finished, you can close Local Users and Groups if you like.






    OPTION TWO

    To Enable or Disable Password Expiration for Local Account(s) using Command Prompt


    1 Open an elevated command prompt.

    2 Do step 3 (enable) or step 4 (disable) below for what you want to do.


    3 To Enable Password Expiration for Local Account

    A) Type the command below into the elevated command prompt, and press Enter. (see screenshot below)

    wmic UserAccount where Name="user name" set PasswordExpires=True

    Substitute user name in the command above with the actual user name of the local account you want to enable password expiration.


    B) If you like, you can change the maximum and minimum password age for local accounts.

    C) When finished, go to step 5 below.

    Enable or Disable Password Expiration for Local Accounts in Windows 10-enable_password_expiration_command.jpg


    4 To Disable Password Expiration for Local Account(s)

    This is the default setting.

    A) Type the command you want below into the elevated command prompt, press Enter, and go to step 5 below. (see screenshot below)

    (Apply to all accounts)
    wmic UserAccount set PasswordExpires=False

    OR

    (Apply to specific local account)
    wmic UserAccount where Name="user name" set PasswordExpires=False

    Substitute user name in the command above with the actual user name of the local account you want to disable password expiration.

    Enable or Disable Password Expiration for Local Accounts in Windows 10-disable_password_expiration_command.jpg


    5 When finished, you can close the elevated command prompt if you like.


    That's it,
    Shawn






  1. apb
    Posts : 94
    win 7 64bit
       #1

    in steps 3 and 4, I believe it should say "password expiration" not "password protection" in the heading.
      My Computers


  2. Posts : 68,862
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #2

    apb said:
    in steps 3 and 4, I believe it should say "password expiration" not "password protection" in the heading.
    You are correct. Thank you. Now corrected.
      My Computers


  3. Posts : 1
    Windows 10
       #3

    Quick potentially stupid question, in Option 2a, (Disable expiration applied to all users), does that also set it to disabled for future users as well, or would I need to reapply it if I created a new account on the system?
      My Computer


  4. Posts : 68,862
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #4

    wb6vpm said:
    Quick potentially stupid question, in Option 2a, (Disable expiration applied to all users), does that also set it to disabled for future users as well, or would I need to reapply it if I created a new account on the system?
    Hello, and welcome to Ten Forums.

    It applies to all current local accounts.

    You will need to apply any changes you want to new accounts, but password expiration is disabled by default anyways.
      My Computers


 

Tutorial Categories

Enable or Disable Password Expiration for Local Accounts in Windows 10 Tutorial Index Network & Sharing Instalation and Upgrade Browsers and Email General Tips Gaming Customization Apps and Features Virtualization BSOD System Security User Accounts Hardware and Drivers Updates and Activation Backup and Restore Performance and Maintenance Mixed Reality Phone


  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 02:22.
Find Us




Windows 10 Forums