HexCon is coming to NYC. Catch the early-bird price before the time's up! Book me a spot

Users prompted to change password randomly on windowsSolved

Participant
Discussion
2 years ago

Hey, we have applied a password policy on our Windows devices, which shows success on the portal. However, the devices prompted to change the password two times after that. I need to check details of applied password policy from the end device. Is there a way to do it.

Replies (3)

Marked SolutionPending Review
Participant
2 years ago
Marked SolutionPending Review

You can run the command “Net Accounts” on the terminal to get the details of password policy associated on the devices.

Marked SolutionPending Review
Participant
2 years ago
Marked SolutionPending Review

I executed this command on the device, and it is showing a different password length from that applied via the policy.

Password length: 8 (applied via policy)
Password length: 10(while running net accounts command)

Marked SolutionPending Review
Hexnode Expert
2 years ago
Marked SolutionPending Review

Hi @roxanne,

Thanks for reaching out to us.

Your devices are prompted to modify the password twice after associating the policy from the portal because you may have configured another password policy using Local Group Policy Editor (Computer Configuration > Windows Settings > Security Settings > Account Policies > Password Policy).

The most restrictive policy will take effect if you have configured the password policy using both the Local Group Policy Editor and Hexnode UEM. To resolve the issue of being prompted to change the password twice, you can change all the values in the password policy configured using the Local Group Policy Editor to their default values and apply a more restrictive policy from Hexnode.

Please make sure that you enforce the Password policy on devices using Hexnode UEM alone to avoid such discrepancies caused by associating two password policies on the devices.

The ‘Net Accounts’ command will only display details about the password policy configured using the Local Group Policy Editor on Windows devices. Therefore, you can obtain the details of the Password policy configured using Hexnode UEM by checking the MDM Diagnostic Report.

To obtain the MDM Diagnostic Report, you can go to Settings > Accounts > Access work or school > Connected to Hexnode MDM > Info > Advanced Diagnostic Report, and click on Create report. It will open a dialog box specifying where the report will be saved. Then, click on Export to save the file to the mentioned location.

Hope this helps. Do reach out if you have any further queries.

Thanks!
Evin Lee
Hexnode UEM