Domain Password Policies for settings in the GPO may still be retained in Active Directory even though the Policy Setting is 'Not Defined'.
In example of 'Maximum password age' below, the 'Policy Setting' is 'Not Defined'
Previous setting of ‘365’ still will show in the domain AD attribute ‘maxPwdAge’ per below.
Resolution - Temporarily adjust Domain Policy or remove/clear the value of attribute.
SOLUTION
A fix for this Product Defect (230900) has been made available via the Password Manager 5.9.3 cumulative hotfix (319839) and is now part of all latest releases of the Product.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center