Group Policy on domain for changing password

We want to force all users to change their password. I know i can go to each user in ADUC and select the option that the user must change the password. How can i do this for everyone instead of doing it individually? also can i make it so that they cannot use their old password again? I remember in NT4 they had these options under user manager for domains. In 2000 its all done with GPO's and AD but i am just not sure the best way to do it without screwing things up. thank you.
Who is Participating?
mikeleebrlaConnect With a Mentor Commented:
yes you can just go ahead and edit the default domain policy... if you want to force all users to change their password right away you will have to set their passwords to expire in say 5 or 7 days.
this has to be done at the domain level via a domain policy GPO. rightclick on your domain in ADUC and create a GPO.  the GPO settings you need can be found in computer configuration>windows settings>security settings>account policies>password policy>
msidnamAuthor Commented:
It looks like there is already a GPO called Default Domain Policy under the Group Policy tab in the domain properties. Nothing is configured though. I see where i can set coplexity, age, history, etc. But how can i tell it to do it the next time they log in?
msidnamAuthor Commented:
thank you for the help.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.