vadm168
Enthusiast
Enthusiast

password expires in x days for AD accounts

VCSA 6.7

When a user's AD account is near expiration, vCenter pops up every time a user logging in to warn about the expiring password. Is a way to disable the notification? We already have other mechanism to notify users on AD account expiring. vCenter's notification only annoys our users.

Will setting below property to 0 and restarting the corresponding services do the trick?

files:

/etc/vmware/vsphere-ui/webclient.properties

/etc/vmware/vsphere-client/webclient.properties

property:

sso.pending.password.expiration.notification.days=0

Thanks,

0 Kudos
2 Replies
flyhightosky
Contributor
Contributor

Hello vadm168,

Yes that will help in extending the notifications, "The Active Directory password expiration notification is separate from the vCenter Server SSO password expiration. The default password expiration notification for an Active Directory user is 30 days but the actual password expiration depends on your Active Directory system. The vSphere Client and the vSphere Web Client control the expiration notification. You can change the default expiration notification to meet the security standards in your corporation"

For more information refer Edit Password Expiration Notification for Active Directory Users

0 Kudos
vadm168
Enthusiast
Enthusiast

Thanks but I was referring to disable the notification altogether because users do not like getting that notification every time they log in to vCenter.

My main question is: does setting sso.pending.password.expiration.notification.days = 0 disable the notification regardless when the user's password will expire?

Thanks,

0 Kudos