Once an account expires, the user is no longer allowed to log on to the domain, and the operating system displays an error message informing the user that the account has been expired.
If, due to any reason, you want to extend the expiration date of the expired account, or if you have hired the temporary user on a permanent basis and want to configure the account so that it never expires, this tutorial is for you.
Here’s how you can modify the settings for an expired account:
- Log on to the Windows Server 2012 Active Directory domain controller with the Enterprise Admin or Domain Admin account credentials.
- If not already started, initialize the Server Manager window from the bottom left corner of the screen.
- On the opened Server Manager window, go to the Tools menu from the menu bar.
- From the displayed list, click Active Directory Users and Computers.
- On the opened Active Directory Users and Computers snap-in, from the left pane, expand the current domain name. (MYDOMAIN.COM for this demonstration.).
- From the expanded tree, locate the target OU that contains the expired domain user account
and needs to be configured as said above.
- Once located, from the right pane, right-click the target user account. (User-01 for this demonstration.).
- From the displayed context menu, go to Properties.
- On the opened user’s properties box, go to the Account tab.
- From the displayed interface, under the Account expires section, either leave the End of radio button selected and change the presently configured expiration date to some other
future date to extend the expiration duration, or click to select the Never radio button to prevent the selected account from expiring altogether.
- Once done, click OK on the user’s properties box, and then close the Active Directory Users and Computers snap-in.
- Ask the user to try logging on to the account. The user should be able to log on to the domain this time.