Skip to content

Commit 832bb57

Browse files
Add a note for Set-AzureADUser command that will not work on federated domains.
Set-AzureADUser -ObjectID <User Object ID> -PasswordPolicies "DisablePasswordExpiration" There is a misunderstanding for disabling password expiration with the command above. That command does not support setting that property for federated users. Related note is added for this case.
1 parent a31b2cd commit 832bb57

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

articles/active-directory/hybrid/how-to-connect-password-hash-synchronization.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -124,6 +124,9 @@ Caveat: If there are synchronized accounts that need to have non-expiring passwo
124124
> [!NOTE]
125125
> The Set-MsolPasswordPolicy PowerShell command will not work on federated domains.
126126
127+
> [!NOTE]
128+
> The Set-AzureADUser PowerShell command will not work on federated domains.
129+
127130
#### Synchronizing temporary passwords and "Force Password Change on Next Logon"
128131

129132
It is typical to force a user to change their password during their first logon, especially after an admin password reset occurs. It is commonly known as setting a "temporary" password and is completed by checking the "User must change password at next logon" flag on a user object in Active Directory (AD).

0 commit comments

Comments
 (0)