When a Windows 7 computer is joined to a domain its computer account is automatically created and is registered with it. Whenever a domain user attempts to log on to the domain using any client computer first of all Windows 7 computer account password is authenticated with the domain controller and once the authentication is successful user account and password is authenticated with active directory database. Just like user accounts computer accounts also have password expiration dates after which domain controllers do now allow users to use that computer to logon to the domain. However computer account passwords are renewed automatically. As an administrator you can increase or decrease the maximum password age of computer accounts when they are member of domain by following the steps given below:
- Logon to the computer with administrator account.
- Click on Start button.
- At bottom of start menu in search box type gpedit.msc command and press enter key.
- On Local Group Policy Editor snap-in under Computer Configuration expand Windows Settings and then expand Security Settings.
- Expand Local Policies and click on Security Options.
- From the right pane double click on Domain member: Maximum machine account password age and on the opened Window in available box specify the maximum password age of machine account.
- Once done click on Ok button and close Local Group Policy Editor snap-in.
- Open Command Prompt and in command window type gpupdate /force to update here computer policy with latest configuration.
- Close Command Prompt.