Edit Password Expiration Notification for Active Directory (Integrated Windows Authentication) Users

The Active Directory password expiration notification is separate from the vCenter Server SSO password expiration. The default password expiration notification for an Active Directory user is 30 days but the actual password expiration depends on your Active Directory system. The vSphere Client controls the expiration notification. You can change the default expiration notification to meet the security standards in your corporation.

Prerequisites

• Enable SSH login to vCenter Server. See Manage vCenter Server from the vCenter Server Shell.

Procedure

1. Log in to the vCenter Server shell as a user with administrator privileges.
   The default user with the super administrator role is root.
2. Change directory to the location of the vSphere Client webclient.properties file.

   cd /etc/vmware/vsphere-ui

3. Open the webclient.properties file with a text editor.
4. Edit the following variable.

   sso.pending.password.expiration.notification.days = 30

5. Restart the vSphere Client.

   service-control --stop vsphere-ui
   service-control --start vsphere-ui