Join the Conversation

To sign in, use your existing MySonicWall account. To create a free MySonicWall account click "Register".

User allowed to user same PW when PW is expired and forced to change in GVC

When a user's Active Directory (LDAP/TLS) PW is expired and GVC forces them to change it, they are allowed to use the same PW as their current one. Is this expected behavior?

Category: Mid Range Firewalls
Reply

Answers

  • MustafaAMustafaA SonicWall Employee

    Since this is not a local user on the firewall, rather an AD user account, you should review AD Password Policy.

  • DervariDervari Newbie ✭

    AD GPO does not allow password reuse. It caches the last 10 PWs. The policy works fine for native Windows clients when they are forced to change their PW.

  • prestonpreston Enthusiast ✭✭

    Hi @Dervari , make sure in the LDAP referrals settings you set as below, then it shouldn't cache the password


Sign In or Register to comment.