samba - Jun 2022 - Password Expiration setting and manually adjusting the date

Hi,
Does anyone have experience with having a password expiration (say 60 days)
and manually adjusting a user's expiration date?

I've got several domains all of which have a 90 day expiration in ad-dc.
Frequently, users forget to change it and get locked out. I find that when
I postpone the expiration by adjusting the date (either in RSAT or CLI -
whichever is most handy at the time) when the user changes the password the
expiration doesn't change from the one I set. So if I give the user 3 days
to change it and they change it the next day, the user still gets locked
out on the third day yet I would expect it to not expire until the 90th day
from the day it was changed.

Is this normal behaviour and if it is, what is the expected method for
dealing with a user with an expired account? If it isn't, what do I need to
look at to rectify this?
Thanks, Phil

On Tue, Jun 7, 2022 at 10:21 AM Philippe LeCavalier <support at
plecavalier.com>
wrote:
> Hi,
> Does anyone have experience with having a password expiration (say 60
> days) and manually adjusting a user's expiration date?
>
> I've got several domains all of which have a 90 day expiration in
ad-dc.
> Frequently, users forget to change it and get locked out. I find that when
> I postpone the expiration by adjusting the date (either in RSAT or CLI -
> whichever is most handy at the time) when the user changes the password the
> expiration doesn't change from the one I set. So if I give the user 3
days
> to change it and they change it the next day, the user still gets locked
> out on the third day yet I would expect it to not expire until the 90th day
> from the day it was changed.
>
> Is this normal behaviour and if it is, what is the expected method for
> dealing with a user with an expired account? If it isn't, what do I
need to
> look at to rectify this?
> Thanks, Phil
>
Anyone experienced this?