Can you shedule users to have to change passwords without blocking them? [#2151173]

Is it possible to have users have to change their passwords every 90 days but not block them, just make them change the password on next use of the site?

If so how?

Comments

Comment #1

AohRveTPV CreditAttribution: AohRveTPV commented 26 May 2014 at 19:55

Status:

Active

» Fixed

You probably found this by now, but to others who may have the same question:

There is a setting to do this at admin/config/people/password_policy under "Blocking expired accounts":

The user with expired account is not blocked, but sent to a change password page. If the password is not changed, the account is blocked and the user cannot login again.

Comment #2

AohRveTPV CreditAttribution: AohRveTPV commented 27 May 2014 at 02:20

Note that the text of that option is currently incorrect (which is what might have prompted the question). The second sentence is wrong and should be ignored. The user is not blocked if they do not change their password at next login. See #2093437: Should (password_policy_block == 1) block user accounts?.