Maximum password age grayed out, cannot change password on windows server 2012 or 2016 domain controller.

Today I am writing about “how to modify Maximum password age on windows server domain controller”, we have faced this issue in our organization our DC password use to get expire on every 42 days that was the causing to restrict access the users, SharePoint sites, Project server site. In one word we can say everything was getting mess up. So we did Google and find the solution but as per the solution the option was grayed out where we can modify server password days or we can put never expire password.

Any way we found the solution and fixed the issue, now we are working without any issue occurring on the server.

Below are the steps by step solution with screen shots:

• Logon to the server with administrator user name and password.
• Click windows+ and enter gpmc.msc

• Once we will hit enter, Group policy Management wizard will get open, see below:

• Navigate the option to server, Group Policy Management> Forest: server Name> Domains>server Domain> and select Default Domain Policy. Here we will right click on the same and click on edit.

• Once we will click on edit option, it will open Group policy Management editor, here we will select required option to do modify. See below for more:

• Here we will select navigate to below option to do modify for Maximum password Age.

Computer Configuration>Policies>Windows settings> Security Policies>password Policy

• Here we will select Maximum password age we will select and double click on that, now can find the option is enabled over here. Finally we reached to option where we can set out our issue.
• Select the Maximum password age properties and under the tab security policy setting and modify as per our requirement.

NOTE: Here if we will select 0 Option, password will not expire.

Thanks, Hope this will help some one ☺