I can't get "Interactive logon: Prompt user to change password before expiration" to actually work. It still observes the 14 days generic policy. I've set it to 1 day but it is not followed. The policy I'm editing is the Default Domain Policy (there are no other policies defined). The minimum password length policy that I've set is enforced but this one is not. The location of this policy on my system: Default Domain Policy -> Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options The only policy that I've defined in that container is the prompt user one. Does that matter? Anyway, the computer has been rebooted with still no change in that setting. Must there be other policies set to make this work? I'm stumped. Doug

There is another place to define policies though it is not located on the start menu. I believe I typed "secpol" at the run command and got the "Local Security policy" console where exists the same options as in the "domain security policy" console. It is the local security policy here that it is paying attention to when it comes to password expiry etc. In my case it was enforcing the change password option but I no defined policies in "domain security policy" which prompted me to go digging for the "local security policy" and fix it there.