We want to implement the current solution for Web e-mail (OWA)users and all other users as well: - A user must be able to change his password when it expires. He must be forced to change the password before proceeding to login. (Through OWA) - If successfully changed password that meets the complexity requirements; user will proceed to the e-mail and his expired status will be changed to No. Otherwise he will go in to the same loop. Thanks

HI, I am assuming you are using Exchange 2007 Sp1. First you must configure account lockout policies and password policies on relevant OUs. Below mention Settings you should apply, Password Complexity Password History Minimum Password Length Maximum Password Age Minimum Password Age When createsan user or enable mailbox that policy will apply to that user and also other user settings may apply to that user such as User Must Change Password at First Logon and User Cannot Change Password. Please refer below articles for more information Resources Configuring the Change Password Feature in Outlook Web Access What you need to know about the OWA Change Password feature of Exchange Server 2007 Configuring and Troubleshooting the Password Change Feature in ISA Server 2006 Regards Chinthaka

Thanks dude for your reply - well actually i have seen this URL before - but dint found much inforamtion .. Secondly YES we have Exchange 2007 - and its hosted through ISA 2006 - Our main objective is too have a notification in OWA or if the users try to inout his password in OWA page - then he should get pop-up or message that his password is going to expire in the coming days - once he changes the password - then the domain password policy should apply to is profile..Third..We have already configured in GPO for Password Complexity Password History Minimum Password Length Maximum Password Age Minimum Password Age So would kindly input your other feedbacks - or is there any tools where we can perform this task ??Thanks

Hi, our main objective is to have a notification yes when password expiration will soon notify about it through a notification message by OWA. This notification will be display after login.once he changes the password - then the domain password policy should apply to is profile yes if you have configure thepassword complexity properly that policies will be effect and new password must be meet with complexity. BTW-Exchange 2007 SP1 Update Roll up 9 has been released,So please install UR9 as well. Regards Chinthaka

Hi.In OWA the change password feature is enabled, but it is not the same policy as in AD. In owa you need eight characters while in AD the policy is six. Do you need to set password complexity on the very OU the users resides in?Stle HansenMCITP EMA, MCTS OCS 2007 http://msunified.net /about

Thanks for your reply - would you kindly ellobrate more on your query -- i hope you have understood my Quesntion ??Thanks

Thanks for your replyIt actually was a question for Chinthaka. He says that you must configure account lockout policies and password policies on relevant OUs. I was wondering if it is enough to configure the password policy on the forest level. I am experiencing a problem withthe owa password feature where password complexity is different in owafrom what it is in AD.In AD the complexity is 6 characters while in owa the complexity is 8.Stle HansenMCITP EMA, MCTS OCS 2007 http://msunified.net /about

HI,Account lockout settings and password settings in Active Directory enable you to configure the account lockout policies and password policy settings that will affect the OutlookWebAccess users(mailbox enabled users)in your Exchange organization. These password policy settings directly affect OutlookWebAccess users and will be enforced. I have mentioned below TechNet article for your Reference. Resource Configuring the Change Password Feature in Outlook Web Access RegardsChinthaka