How to change the password expiry notice default

[Xavier Mustin]

• Windows® 7
• Windows Server® 2008 R2

Symptoms
Previously, the default interval that users were notified of password expiration was 14 days before expiration. In Windows 7 and Windows Server 2008 R2, the default password expiry notice occurs 5 days before the password expiration date.

Cause
This is by design.

Resolution
Unless specified and enforced by a policy, Windows 7 and Windows Server 2008 R2 users will not received a password expiry notice until 5 days before password expiration.
Using gpedit, the group policy to alter this default can be found at:

Computer Configuration\Windows Settings\Local Policies\Security Options

under Interactive Logon: Prompt user to change password before expiration. Using regedit, the registry entry which controls this can be found at:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon under PasswordExpiryWarning.

Works also for Server 2012R2
Setting is also on Server 2012R2 available. Setting in the GPO is located at Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options