Is there a way in Windows Server 2003 or 2008 and in Active Directory, to specify in a policy that when a users password expires that day, to have it expire at a certain time, say 4:00am.
The issue came up, because the expiration occurs during the middle of the working day, say 9:00am. Then when a user is already logged into Windows in the network, and using different applications, those will start behaving wrongly because of authentication. They have to log out and log back in, in order for Windows to ask for the new password.
So, if when they log in early in the morning it would ask for the new password, then they won't have to log back out during the working day.
One of the AD Admins said: "Have them check if their password will expire before starting the day".. but really, who does that?
And I don't have access to an AD to check these types of policies. So, is this possible?