AD Password Interval

GabeShack
Valued Contributor III

Hey all,
Wondering what people use to set their pass interval when binding to AD?

I had been using a script to set the pass interval to 0, but it looks like its not performing correctly.

my initial script just had:

sudo dsconfigad -passinterval 0

Now Im wondering if I need to add this to make it work:

killall DirectoryService
dscacheutil -flushcache

How do you perform this in your environment?
Gabe Shackney
Princeton Public Schools

Gabe Shackney
Princeton Public Schools
3 REPLIES 3

dwhitehead
New Contributor

Are you running into any issues that are prompting you to change the setting?

I'm not actually sure that you'll need to kill directory services in order for the change to take effect, but if you want to be certain: killall opendirectoryd

Malcolm
Contributor II

Are you sure this isn't being controlled via AD? try a password AD policy applied to the users security group?

http://mctexpert.blogspot.com.au/2012/07/create-new-password-setting-object-in.html
There is instructions further down the page for 2008. Had to do something similar for our NPS authentication.

gmarnin
New Contributor III

You have to run dsconfigad -passinterval 0 before binding.

Are running DeepFreeze?