{"id":4907,"date":"2023-10-25T09:00:47","date_gmt":"2023-10-25T16:00:47","guid":{"rendered":"https:\/\/SUMMALAI.COM\/?p=4907"},"modified":"2024-03-05T12:56:06","modified_gmt":"2024-03-05T20:56:06","slug":"how-to-set-an-individual-users-password-to-never-expire-in-azure-ad","status":"publish","type":"post","link":"https:\/\/SUMMALAI.COM\/?p=4907","title":{"rendered":"How to Set an Individual User’s Password to Never Expire in Azure AD"},"content":{"rendered":"\n

This article explains how to set a password for an individual user to not expire. You have to complete these steps using PowerShell.<\/p>\n\n\n\n

Prerequisites<\/h2>\n\n\n\n

PowerShell 7 and later is the recommended PowerShell version for use with the Microsoft Graph PowerShell SDK on all platforms. There are no additional prerequisites to use the SDK with PowerShell 7 or later.<\/p>\n\n\n\n

The PowerShell script execution policy must be set to as below. <\/p>\n\n\n\n

Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope CurrentUser<\/code><\/em><\/strong><\/a><\/p>\n\n\n\n

Install Microsoft Graph<\/h2>\n\n\n\n

The Microsoft Graph PowerShell SDK comes in 2 modules, Microsoft.Graph and Microsoft.Graph.Beta, that you will install separately. These modules call the Microsoft Graph v1.0 and Microsoft Graph beta endpoints, respectively. You can install the 2 modules on the same PowerShell version.<\/p>\n\n\n\n

Using the Install-Module<\/strong> cmdlet is the preferred installation method for the Microsoft Graph PowerShell modules.<\/p>\n\n\n\n

Installing the main modules of the SDK, Microsoft.Graph and Microsoft.Graph.Beta, will install all 38 sub modules for each module. Consider only installing the necessary modules, including Microsoft.Graph.Authentication<\/code> which is installed by default when you opt to install the sub modules individually. For a list of available Microsoft Graph modules, use Find-Module Microsoft.Graph*<\/code>. Only cmdlets for the installed modules will be available for use.<\/p>\n\n\n\n

To install the v1 module of the SDK in PowerShell Core or Windows PowerShell, run the following command.<\/p>\n\n\n\n

Install-Module Microsoft.Graph -Scope CurrentUser<\/strong>\n<\/code><\/pre>\n\n\n\n
Optionally, you can change the scope of the installation using the -Scope<\/code> parameter. This requires admin permissions.<\/p>\n\n\n\n
Install-Module Microsoft.Graph -Scope AllUsers<\/strong><\/code><\/pre>\n\n\n\n
Verify installation<\/h3>\n\n\n\n
After the installation is completed, you can verify the installed version with the following command.<\/p>\n\n\n\n
Get-InstalledModule Microsoft.Graph<\/strong>\n<\/code><\/pre>\n\n\n\n
The version in the output should match the latest version published on the PowerShell Gallery. Now you’re ready to use the SDK.<\/p>\n\n\n\n
Updating the SDK<\/h2>\n\n\n\n
You can update the SDK and all of its dependencies using the following command.<\/p>\n\n\n\n
Update-Module Microsoft.Graph<\/strong><\/code><\/pre>\n\n\n\n
How to check the expiration policy for a password<\/h2>\n\n\n\n
Use the Connect-MgGraph<\/code> command to sign in with the required scopes. You need to sign in with an admin account to consent to the required scopes.<\/p>\n\n\n\n
Connect-MgGraph -Scopes \"User.ReadWrite.All\",\"Group.ReadWrite.All\"<\/strong><\/code><\/pre>\n\n\n\n
The command prompts you to go to a web page to sign in using a device code. Once you’ve done that, the command indicates success with a Welcome To Microsoft Graph!<\/code> message. You only need to sign in once per session.<\/p>\n\n\n\n
To see if a single user’s password is set to never expire, run the following cmdlet by using the UPN (for example, user@contoso.onmicrosoft.com<\/em>) or the user ID of the user you want to check:<\/p>\n\n\n\n
Get-MGuser -UserId <userid> -Property UserPrincipalName, PasswordPolicies | Select-Object UserPrincipalName,@{
N=”PasswordNeverExpires”;E={$_.PasswordPolicies -contains “DisablePasswordExpiration”}
}<\/strong><\/p>\n\n\n\n
To see the Password never expires<\/strong> setting for all users, run the following cmdlet:<\/p>\n\n\n\n
Get-MGuser -All -Property UserPrincipalName, PasswordPolicies | Select-Object UserprincipalName,@{
N=”PasswordNeverExpires”;E={$_.PasswordPolicies -contains “DisablePasswordExpiration”}
}<\/strong><\/p>\n\n\n\n
To get a report of all the users with PasswordNeverExpires in CSV on the desktop of the current user with name ReportPasswordNeverExpires.csv<\/strong><\/p>\n\n\n\n
Get-MGuser -All -Property UserPrincipalName, PasswordPolicies | Select-Object UserprincipalName,@{
N=”PasswordNeverExpires”;E={$_.PasswordPolicies -contains “DisablePasswordExpiration”}
} | ConvertTo-Csv -NoTypeInformation | Out-File $env:userprofile\\Desktop\\ReportPasswordNeverExpires.csv<\/strong><\/p>\n\n\n\n
Set a password to never expire<\/h2>\n\n\n\n
Run one of the following commands:<\/p>\n\n\n\n