Active Roles displays incorrect password expires date if using Fine Grained Password Policies (4265602)

In specific situations, the Password Expires date shown in the Active Roles Console (inside the Additional Account Info tab) may be incorrect.

Consider the following scenario:

1. A Fine Grained Password Policy is recently configured
2. Users currently have an existing Maximum Password Age configured
3. The existing Maximum Password Age is less than the newly configured Maximum Password Age configured in the Fine Grained Password Policy

STATUS

WORKAROUND:

In order to see the correct Password Expiration date, view the user object properties from Active Directory Users and Computers (ADUC) and confirm the

msDS-UserPasswordExpiryTimeComputed value. This can be found on the user object properties Attribute Editor tab as shown in the below image.

SOLUTION:

This issue with the password expiration can be resolved by upgrading to the latest version of Active Roles 7.4.3 with the latest hotfix: download.