(This is our users' default method because we have our ADFS server address in the Local Intranet zone so users aren't required to enter their password in browsers on their workstations. Using the "Windows Integrated Authentication" method, no password expiration claims are sent at all. Type the following command to enable password to expire and press Enter: wmic UserAccount set PasswordExpiresTrue Type the following command to set the number of days a password can be used.
On WIA method, again, no password expiration claims are sent.ĭoing a little more testing, here's what seems to be happening: On "Forms" authentication, she is receiving the "passwordexpirationtime", "passwordexpirationdays", and "passwordchangeurl" claims. 1 Answer Sorted by: 3 I was going to suggest to disable/reenable for the netplwiz, because I know from experience that you can do this with a windows live account, though figuring out the username could sometimes be a problem. I tested with another user, whose password will expire in a few days. On WIA, no password expiration claims are sent. On "Forms" authentication, she only has the "passwordexpirationtime" claim.
I tested with one of the original users facing this issue. I just did some testing with the Claims X-Ray tool, adding in the claim rule I mentioned before.
0 kommentar(er)
