#SaNtOsH, +91 8900 900 909
How to Force Local Account to Change Password at Next
Sign-in in Windows 10
EXAMPLE: "The user's password must be changed before signing in" at sign-in
#SaNtOsH, +91 8900 900 909
#SaNtOsH, +91 8900 900 909
#SaNtOsH, +91 8900 900 909
Here's How:
#SaNtOsH, +91 8900 900 909
1. Press the Win+R keys to open Run, type lusrmgr.msc into Run, and click/tap on OK to open Local
Users and Groups.
Note
Local Users and Groups is only available in the Windows 10 Pro, Enterprise, and Education editions.
2. Click/tap on Users in the left pane of Local Users and Groups. (see screenshot below step 3)
3. Right click or press and hold on the name (ex: "Brink2") of the local account you want, and click/tap
on Properties. (see screenshot below)
4. In the General tab, check the User must change password at next logon box, and click/tap on OK.
(see screenshot below)
Note
User must change password at next logon will be grayed out if the Password never expires box is
checked.
#SaNtOsH, +91 8900 900 909
#SaNtOsH, +91 8900 900 909
5. When finished, you can close Local Users and Groups if you like.
Note
The User must change password at next logon box for this local account will automatically get
cleared (unchecked) after they change their password at sign-in, but password expiration will still
remain enabled for this local account unless you disable it (if wanted) later.
That's it,
#SaNtOsH
+91 8900900909
#SaNtOsH, +91 8900 900 909
#SaNtOsH, +91 8900 900 909
How to Change Maximum and Minimum Password Age for
Local Accounts in Windows 10
OPTION ONE
To Change Maximum Password Age for Local Accounts using Local
Security Policy
Note
Local Security Policy is only available in the Windows 10 Pro, Enterprise, and Education editions.
All editions can use Option Three below.
1. Press the Win+R keys to open Run, type secpol.msc into Run, and click/tap on OK to open Local
Security Policy.
2. Navigate to Account Policies and Password Policy in the left pane of Local Security Policy. (see
screenshot below)
3. In the right pane of Password Policy, double click/tap on the Maximum password age policy. (see
screenshot above)
4. Type in a number between 0 and 999 for how many days you want a password can be used before it
expires, and click/tap on OK. (see screenshot below)
Note
The default setting is 42 days.
You can specify that passwords never expire by setting the number of days to 0.
#SaNtOsH, +91 8900 900 909
#SaNtOsH, +91 8900 900 909
The minimum password age must be less than the maximum password age.
5. When finished, you can close the Local Security Policy window if you like.
6. If you like, you can force local accounts to change their password at next sign-in to enforce your
changes to minimum and maximum password age.
#SaNtOsH, +91 8900 900 909
#SaNtOsH, +91 8900 900 909
OPTION TWO
To Change Minimum Password Age for Local Accounts using Local
Security Policy
Note
Local Security Policy is only available in the Windows 10 Pro, Enterprise, and Education editions.
All editions can use Option Four below.
1. Press the Win+R keys to open Run, type secpol.msc into Run, and click/tap on OK to open Local
Security Policy.
2. Navigate to Account Policies and Password Policy in the left pane of Local Security Policy. (see
screenshot below)
3. In the right pane of Password Policy, double click/tap on the Minimum password age policy. (see
screenshot above)
4. Type in a number between 0 and 998 for how many days you want a password can be changed
after, and click/tap on OK. (see screenshot below)
Note
The default setting is 0 days.
The minimum password age must be less than the maximum password age.
#SaNtOsH, +91 8900 900 909
#SaNtOsH, +91 8900 900 909
5. When finished, you can close the Local Security Policy window if you like.
6. If you like, you can force local accounts to change their password at next sign-in to enforce your
changes to minimum and maximum password age.
#SaNtOsH, +91 8900 900 909
#SaNtOsH, +91 8900 900 909
OPTION THREE
To Change Maximum Password Age for Local Accounts using
Command Prompt
1. Open an elevated command prompt.
2. Enter the command below into the elevated command prompt, press Enter, and make note of the
current maximum and minimum password age. (see screenshot below)
net accounts
3. Enter the command below into the elevated command prompt, and press Enter. (see screenshot
below)
net accounts /maxpwage:days
Note
Substitute days in the command above with a number between 1 and 999 for how many days you
want a password can be used before it expires.
The default setting is 42 days.
The minimum password age must be less than the maximum password age.
#SaNtOsH, +91 8900 900 909
#SaNtOsH, +91 8900 900 909
4. When finished, you can close the elevated command prompt if you like.
5. If you like, you can force local accounts to change their password at next sign-in to enforce your
changes to minimum and maximum password age.
#SaNtOsH, +91 8900 900 909
#SaNtOsH, +91 8900 900 909
OPTION FOUR
To Change Minimum Password Age for Local Accounts using
Command Prompt
1. Open an elevated command prompt.
2. Enter the command below into the elevated command prompt, press Enter, and make note of the
current maximum and minimum password age. (see screenshot below)
net accounts
3. Enter the command below into the elevated command prompt, and press Enter. (see screenshot
below)
net accounts /minpwage:days
Note
Substitute days in the command above with a number between 1 and 998 for how many days you
want a password can be changed after.
The default setting is 0 days.
The minimum password age must be less than the maximum password age.
#SaNtOsH, +91 8900 900 909
#SaNtOsH, +91 8900 900 909
4. When finished, you can close the elevated command prompt if you like.
5. If you like, you can force local accounts to change their password at next sign-in to enforce your
changes to minimum and maximum password age.
#SaNtOsH, +91 8900 900 909
