Today for the 3rd morning in a row, I had a user request I reset their password. When I looked at their user account, I noticed some inconsistencies:
The Password Last Changed field shows 5/27/2021, even though I changed it yesterday and the day before.
The Password Expires field showed today’s date.
I started by Resetting the pw to blank (which is what we always do when we reset).
When I did that, I noticed that the Password Expires Days field value is 120, but the Password Expires Date was still today.
To try to force it, I changed the days to 119, then back to 120, which did update the Password Expires field to be 01/29/22. If I Reset Password again though, the Password Expires Date jumps back to today. What’s going on here?
I think Blank password (what resetting it sets it to) sets it todays date as a way to force the user to change it (but they get 3 uses with it blank, I think).
After the user logs in and changes it, I would think it should show the date they changed it + 120 days. If you’re going by the User Security screen, make sure you refresh it to see the changes to the record for the user changing their PW.
Edit
The fact that the Last Changed date hasn’t changed, leads me to think the user isn’t changing it. They’re either probably just logging in with the blank PW, and not actually setting a new one. I think you’re prompted for a new one when logging in with a blank PW, but there is an option to skip that (for a couple of login attempts - 3 I think)
That’s exactly what it was. He wasn’t changing it. Strange, because he’s not a new user…
Thanks, Calvin. As usual, you’re awesome. Happy Friday again, btw.
