The New Password and confirm password boxes missing at locked screen after password expires

Question

_{Thursday, April 20, 2017 5:00 AM}

Hi All,

I'm currently having an issue where the password for the user account has expired and the user is prompted to lock the computer to provide current credentials and during the process in the Logon UI interface the user attempts to change the password but does not get presented the "New Password" and "Confirm Password" Fields and thus fails to met complexity rules for the password as we can't submit one. if we use the switch user process we can change the password, just like if we log off the user and then logon to the computer you have the ability to change the password.

The computers in question are Windows 10, with a Windows 2008 R2 domain. we have been able to validate with a clean windows 10 computer joined to the domain that the password setting reappears after the GPO is removed. Where this becomes an issue is when we remove the GPO from an imaged machine the settings do not revert which means there is a setting keeping it in the incorrect setting. 

Has anybody come across this issue? or has an idea on how I would find the setting which is stopping the "new password" and "Confirm Password" fields from appearing only during the lock screen authentication process it would be greatly appreciated.

Cheers

Steve

All replies (3)

_{Friday, April 21, 2017 1:45 AM}

Hi Steve,

I haven’t seen a situation as you, I have used Windows 10 for 2 years.

According to your description, the disappearance of new password and confirm password box is related to the GPO you applied, please check carefully. In my opinion, you could try to refresh a computer to get back password settings.

Besides, since Windows 10 1703 version has been released, upgrade system to the latest build 15063.138 to check if issue can be fixed.

Regards

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Friday, April 21, 2017 4:42 AM}

Hi Teemo,

So i have been able to work out the issue was, and have created a video to replicate the issue, along with the fix for it. It turns out when you turn on the Group Policy setting "Interactive logon: Do not display last user name" it causes this issue. i have created a video http://bit.ly/2oWY65h to show the experience with and without the setting defined (I used the regkey for Demo). 

I have been able to validate that this an issue on multiple builds of windows 10. it appears from the look of the UI Text it is known that this occurs but the user experience appears to be a little convoluted.

Cheers

Steve

_{Friday, April 21, 2017 9:51 AM}

Thanks for your demo, your discovery is correct and valuable.

For the GPO: Interactive logon: Do not display last user name, on 1703 version, has become Interactive logon: Do not display last signed-in and seems not to influence expired password. You could upgrade to this version to check.

What’s more, how about press Ctrl + Alt +Del keys combination directly? It’s convenient to change password by this way.

Regards

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].