In this example the passwords would expire after 365 days, but I want it to never expire.
If I configure this policy with adsiedit.msc, I can use the term "(never)" successfully. The same is true for LDIF-Import, where the promising value is "-9223372036854775808" (I8-Format).
I cannot find any helpfile or other source where the wanted value is mentioned. If I analyse a configured PSO (with the desired value already set) with "Get-ADFineGrainedPasswordPolicy" the returned value is "00:00:00", but it's not possible to set this
value. At least: I am not able to do it successfully.
Thanks in Advance, T.
(Sorry for the crosspost, but I could not get a complete answer yet.)
As you know, you cannot assign 0 to msDS-MaximumPasswordAge. But you should be able to assign -9223372036854775808 (which is -2^63). If it cannot be done in PowerShell, you may need to use ldifde. See this link:
Microsoft is conducting an online survey to understand your opinion of the Technet Web site. If you choose to participate, the online survey will be presented to you when you leave the Technet Web site.