Share via


Windows Server 2012/2016 ADDS Troubleshooting: Maximum password age grayed out, cannot set password

Scenario

Organisation facing this issue when DC password used to expire every 42 days that was the causing restricted access to users, SharePoint sites, and Project server site.

So we searched the internet and found the solution. But as per the solution,  the option was grayed out where we could modify server password days and we can put never expire password.

Troubleshooting

Anyway, we found the solution and fixed the issue.

Below are the steps by step solution with screenshots:

https://lh3.googleusercontent.com/wekULU0Z0tBiybWWya3h-u-cFzgvEPTrp5NMZg-DzXuKX7QS91OiZUnC6IGsCdPpu8iqurbqy9jU5FKA-tj9ZYZ0KzDh74xRFy38RQhikAiU_FRFPcC-Iu0PKvINE1bwpQIPYPYGUTuXqGfYig

Log in to the server with your administrator account.

Click Windows+ and enter gpmc.msc

https://lh5.googleusercontent.com/ioEpPxfVQoOno5aBG1vVMP93AvvjAvTW0qdZK1akTfbPD3CcoZTLqw-MyxGM5_9SegMXy8uP28z52vePWrdOLL6rrQgYVUXVt1lvrhYChvI4dJqOdiNSl-N5EZ7YBsB9mMoTlnBeTos7ipF0dg

Once we will hit enter, Group Policy Management wizard will open:

https://lh3.googleusercontent.com/IGpnQsh9XPDB1PgKp82MYfx8HcLkNKPoH8yZk2Mgs3tD9fRQ9B2CNJu1aMqu5fjqGGEMDcEq4p1spQtdi2s0ge-OZGUfvVVq0DF1WAkX-CMdHgcpjQDDmKfAz9OQRZVLMPboqsB608ERe_-kgQ

Navigate to server >Group Policy Management > Forest: Server Name > Domains > Server Domain > and select Default Domain Policy. Here we will right-click on the same and click Edit:

https://lh5.googleusercontent.com/8oM3DmkzRYMUnRxp2UCUkPVHO9rg3mHC1ciOno-GM3YH082mhz7OCYy4bdt3pqKC2x1mLVIPaYNEvUmCw233J9BAt53X6_s1lssENWZ_4dTVvlx66pl5QY_Uq6syEW__lDadSuRBaI8OltcisQ

Once we will click Edit, it will open Group Policy Management Editor. Here we will select the required option to do modify. See below for more:

https://lh3.googleusercontent.com/Qx55bhUdsvrdh7Q7U63iaDepQBIU6_eQGluvUqbvXnJel_IkKEK06HuRp5I1YrZgrOenk4mdQRiLFG0FJj5yf5Pldbd4D3RcbPVZTfS8fzv_Ieuh9MwBfuDndUZoFG0Vs6ayI44fc0RN9XT6WQ

Here we will select navigate on below option to do modify for Maximum Password Age.

Computer Configuration > Policies > Windows Settings > Security Policies > Password Policy.

Here we will double-click on Maximum Password Age. Now we can find the option enabled over here. Finally, we reached the option where we can set our issue.

Select the Maximum Password Age properties. Under the tab Security Policy Setting and modify as per our requirement.

https://lh3.googleusercontent.com/D7JyincJnxkUKDLl7wuiuM1nYw5Ssl6nvzS1OIOaz4Wxifu4a8RY93vbytgEUuPiIo2-J9UeDFQwLNlhxq077lC8IPhGAVMZj1oGCcwfdtnzzAHTxx8pB7wKtexEsWAB2kM0Fh5f1CVoyPsbeQ

NOTE: Here if we will select 0 days Option the password will not expire.