14 Day Password Change Notification Cannot Be Changed

In Windows NT 3.x, when your password is 14 days from expiration, you receive a Password Change Notification when logging on requesting you to change your password. If the Maximum Password Age is set to 30 days, you receive the notice when your password is only half way through its life span. Although you may wish to change the advance time of the reminder, the Password Change Notification is hard coded at 14 days in Windows NT 3.x and is not configurable.

In Windows NT 4.0, a new registry parameter is available to allow administrators to configure the number of days at which the Password Change Notification is presented. The implementation of this new parameter requires that the registry change be made on the client computer.

WARNING: Using Registry Editor incorrectly can cause serious, system-wide problems that may require you to reinstall Windows NT to correct them. Microsoft cannot guarantee that any problems resulting from the use of Registry Editor can be solved. Use this tool at your own risk.

1. Run Registry Editor (Regedt32.exe).
2. From the HKEY_LOCAL_MACHINE subtree, go to the following key:
   \Software\Microsoft\Windows NT\CurrentVersion\Winlogon
3. Add or modify the following entry:
   PasswordExpiryWarning: REG_DWORD: <number of days>
4. Click OK and quit Registry Editor.

This entry specifies the number of days that a warning message is displayed before the user's password expires. This value entry does not normally appear in the registry unless you add it manually.

In Windows 2000 and later, you can use Group Policy settings to change when the Password Change Notification is presented. In Windows 2000, the policy setting is Prompt user to change password before expiration. In Windows 2003, the policy setting is Interactive Logon: Prompt user to change password before expiration.