The temporary tokens functionality is disabled by default. The administrator has to enable it.
Go to the Active Directory Users and computers Window. Right-click the Tokens node and select properties.
Once the auxiliary Properties window is open, go to the Miscellaneous Tab.
Enable "Temporary Tokens" and set a Validity Window, in minutes, hours or days.
Note: Below is a sample screenshot. 180 days has been set as an example, we do not recommend such a long period of time. Use this feature as you see fit.
Once you have set the parameters, restart the AD Users and Computers window. The Temporary tokens should be listed in the context menu of the Tokens node (right-clicking it):
