Link to home
Start Free TrialLog in
Avatar of msidnam
msidnamFlag for United States of America

asked on

Group Policy on domain for changing password

We want to force all users to change their password. I know i can go to each user in ADUC and select the option that the user must change the password. How can i do this for everyone instead of doing it individually? also can i make it so that they cannot use their old password again? I remember in NT4 they had these options under user manager for domains. In 2000 its all done with GPO's and AD but i am just not sure the best way to do it without screwing things up. thank you.
Avatar of mikeleebrla
mikeleebrla
Flag of United States of America image

this has to be done at the domain level via a domain policy GPO. rightclick on your domain in ADUC and create a GPO.  the GPO settings you need can be found in computer configuration>windows settings>security settings>account policies>password policy>
Avatar of msidnam

ASKER

It looks like there is already a GPO called Default Domain Policy under the Group Policy tab in the domain properties. Nothing is configured though. I see where i can set coplexity, age, history, etc. But how can i tell it to do it the next time they log in?
ASKER CERTIFIED SOLUTION
Avatar of mikeleebrla
mikeleebrla
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of msidnam

ASKER

thank you for the help.