That sounds like a really stupid way to handle it. Probably about the worst way.
I can just imagine the conversation from the designers:
1 Like
We have had very similar experiences, especially with travelling sales reps who rarely reboot their laptops.
The problem was exacerbated when we moved from XP to 7 - the latter doesnāt consistently inform the luser of their passwordās imminent death.
So I found a script on the intarwebs that searches AD and emails any luser with passwords nearing expiration, modded it for our environment so that it starts emailing 10 days before, and set it to run on a DC every day. Helps a lot - PM me if you want details.
Iāve still had people tell me that they werenāt told that their password would expireā¦ so I just refer them to the 10 emails that they deleted. 
Send me this script. Or the link where you found it. I will say I wrote it from scratch and get accolades.
2 Likes
Sounds like a fairly easy/straightforward PowerShell script.
The problem reminds me of a mantra a friend of mine once told me and that I hold very true. āIn IT thereās 20 ways to do something wrong and 5 ways to do it right.ā
Iāve gone through a couple different ways to accomplish this from batch files at login, Powershell, exported Hyena reports and about 4 other ways of doing it. Every environment is different and Iāve given up expecting to find a canned solution for anything. So if anyone has a way that works, I like to know.
Ummā¦ You want me to pick these two twelve year old boys at 6:30, and you donāt care what happens to them between then and 9 AM? Leave them at the civic center which isnāt open yet? No. Theyāre coming to my house to watch Japanese TV shows until I take them with me to go pick up the third kid.
I didnāt say it in those words, but the two kids did come to my house to watch anime this morning until it was time to pick up the third kid.
2 Likes
Itās gotta be a group policy or something because we have AD at work and Iām one of those people who waits until the last moment to change my password. It will keep warning me, and finally it tells me I have to change it immediately on the day it expires. We donāt get locked out; it is waiting for me if I happen to be gone that day.
I decline to change any more often than the 120 days or whatever ridiculous period it is.
Dear $ProjectDamager
I keep on telling you that Symantec licences should be renewed at $sites, but you conveniently ignore that fact. It is your responsibility to order new licences etc, not mine.
Sod off, youāre creating stress for me.
I have yet to see anything good come out of forced password change. 3M makes money on it, since they sell the post-it notes that people writes their passwords on.
Please, anyone, explain WHY passwords needs to be changed! (Unless it is a obvious reason, as in someone have gained access)
A holdover from much older O/Sās IMO.
A āmoving targetā approach.
Change your password every 120 days and you lessen the chance of passwords being āhackedā
Brute force attacks render this policy moot.
Microsoft/Novell just left the 120 day as a default IIRC.
Man I miss the Netware daysā¦ Got my first CNE in 1991ā¦ Wow! Has that much time passed?
JT
There are people in the world who I would not trust to decently parent a paper doll.
You, @Nabiki, are at the opposite end of the spectrum.
My password before mandated password changes was a random 8 digit alphanumeric, my new passwords at the office are simple variations on a theme with different numbers and or symbols at the end.
Despite the fact that I had the other password for several years Iād bet it was still more secure than Password_01.
1 Like
Iāve always though of being a parent as a huge responsibility, one Iām not ready or qualified for. One of the reasons Iāve never become one. Another is because I just donāt like babiesā¦
5 Likes
I say the same thing. Mind you, Iāve also got an almost-10-year-old, so that doesnāt seem to have worked muchā¦
[quote=āNabiki, post:440, topic:435ā]
Iāve always though of being a parent as a huge responsibility, one Iām not ready or qualified for
[/quote]And thatās why you would likely make a very good parent.
[quote=āNabiki, post:440, topic:435ā]
Another is because I just donāt like babiesā¦
[/quote]And thatās why you probably would not 
On the subject of passwords, I prefer the term āpass phraseā.
I have a password safe and keep all my web passwords in there. They are all randomly generated by the password safe and are generally 25 characters long (though some sites restrict password length)
The passphrase to unlock the safe is about 30 characters long and I very much doubt that even a brute force attack could unlock it.
My work passphrase is a bit shorter at 20 characters long, but I really doubt that that could be brute forced in any reasonable timespan.
1 Like
Dear $Boss,
As a senior technical person, itās part of my duty to advise you on technical matters and stop you from doing something particularly bone-headed.
If you are so arrogant as to ignore what Iām telling you and go ahead with your brain-dead decision, the consequences are all yours. I have let the right people know that I had nothing to do with it.
Hate,
Viking
2 Likes
This kind of stuff burns my ass. If you hire people to do your technical stuff why would you then not listen to them with regards to technical matters?
Iāve moved to a group at work that handles these requests. In just three weeks, every task Iāve worked on has been āpre-plannedā by others. It is exactly as you are describing. This can only lead to tears.
In my case, heās an MBA-waver without a technical clue in his head. You would think that the manager of an IT security group would have some technical skills, but no.
Heās been here almost 2 years now and still makes disparaging comments of technical people who have been here 10 times as long and know the place backwards.
Stop panicking whenever an issue with the switch happens. You already got my email to the engineers telling them about it and the troubleshooting Iāve done. It doesnāt help that you think Iām not caring about it just because Iām calm whenever said issue happens. And for crying out loud, donāt just glance at the emails and tell me you read it. I know you didnāt read it because I have to remind you what the possible causes of said issues are and whatās being done when you come panicking to me.