msidnam
asked on
Group Policy on domain for changing password
We want to force all users to change their password. I know i can go to each user in ADUC and select the option that the user must change the password. How can i do this for everyone instead of doing it individually? also can i make it so that they cannot use their old password again? I remember in NT4 they had these options under user manager for domains. In 2000 its all done with GPO's and AD but i am just not sure the best way to do it without screwing things up. thank you.
this has to be done at the domain level via a domain policy GPO. rightclick on your domain in ADUC and create a GPO. the GPO settings you need can be found in computer configuration>windows settings>security settings>account policies>password policy>
ASKER
It looks like there is already a GPO called Default Domain Policy under the Group Policy tab in the domain properties. Nothing is configured though. I see where i can set coplexity, age, history, etc. But how can i tell it to do it the next time they log in?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
thank you for the help.