Max-Pwd-Age Attribute#

The maximum amount of time a password is valid. This value is stored as a LargeInteger that represents a NumericDate from the time the pwdLastSet before until the Password Expiration.

Desc	Value
CN	Max-Pwd-Age
Ldap-Display-Name	maxPwdAge
Size	-
Update Privilege	Domain administrator
Update Frequency	-
Attribute-Id	1.2.840.113556.1.4.74
System-Id-Guid	bf9679bb-0de6-11d0-a285-00aa003049e2
Syntax	Interval
Classes used in	Domain-Policy, Sam-Domain, Sam-Domain-Base

Implementations#

• Windows 2000 Server
• Windows Server 2003
• Windows Server 2003 R2
• Windows Server 2008

When using the Group Policy Object management tool, the values are on set in "Whole number" of days.

More Information#

There might be more information for this subject on one of the following:

• AD Determining Password Expiration
• Domain Wide Account Policies
• Password History
• Password Maximum Age
• Password Policy
• PwdProperties
• Windows Default Password Policy