Set up a password expiration policy for a set of users in hybrid environment

Question

Hi,

I need your help with implementing a password expiration policy for one of my customers. Here's the situation:

• The customer has Entra ID and an on-prem Active Directory (synced with Azure AD Connect).
• All Users have Microsoft Business Premium licenses.
• All Devices are managed by Intune.

They want passwords to expire every 180 days.

The challenge is that my customer want to apply this policy only to a set of users within his tenant.

How can I enforce this password expiration policy only for a set of users without affecting the others ?

The global idea is that users will be prompted every 180 days to change their password by the usual M365 pop-up.

Note : They don't use on-premise resources, On-Prem Active Directory is here due to history..

Thanks in advance for your advice !

Answer 1

@J.Aeby, Thanks for posting in Q&A. Based on my researching, the Microsoft Entra password policies set is for org. If you want to change it for a set of users, you can use Update-MgUser to configure password expire for users. Here is a link with more details:

https://learn.microsoft.com/en-us/entra/identity/authentication/concept-sspr-policy

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.