[Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 154
  • Last Modified:

Group Policy on domain for changing password

We want to force all users to change their password. I know i can go to each user in ADUC and select the option that the user must change the password. How can i do this for everyone instead of doing it individually? also can i make it so that they cannot use their old password again? I remember in NT4 they had these options under user manager for domains. In 2000 its all done with GPO's and AD but i am just not sure the best way to do it without screwing things up. thank you.
0
msidnam
Asked:
msidnam
  • 2
  • 2
1 Solution
 
mikeleebrlaCommented:
this has to be done at the domain level via a domain policy GPO. rightclick on your domain in ADUC and create a GPO.  the GPO settings you need can be found in computer configuration>windows settings>security settings>account policies>password policy>
0
 
msidnamAuthor Commented:
It looks like there is already a GPO called Default Domain Policy under the Group Policy tab in the domain properties. Nothing is configured though. I see where i can set coplexity, age, history, etc. But how can i tell it to do it the next time they log in?
0
 
mikeleebrlaCommented:
yes you can just go ahead and edit the default domain policy... if you want to force all users to change their password right away you will have to set their passwords to expire in say 5 or 7 days.
0
 
msidnamAuthor Commented:
thank you for the help.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now