How to change the password expiry notice default

This article applies to the following operating systems:

  • Windows® 7

  • Windows Server® 2008 R2

Symptoms

Previously, the default interval that users were notified of password expiration was 14 days before expiration. In Windows 7 and Windows Server 2008 R2, the default password expiry notice occurs 5 days before the password expiration date.

Cause

This is by design.

Resolution

Unless specified and enforced by a policy, Windows 7 and Windows Server 2008 R2 users will not received a password expiry notice until 5 days before password expiration. Using gpedit, the group policy to alter this default can be found at: Computer Configuration\Windows Settings\Local Policies\Security Options under Interactive Logon: Prompt user to change password before expiration. Using regedit, the registry entry which controls this can be found at: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon under PasswordExpiryWarning.