Solved

Force everyone to change their password

Posted on 2006-10-30
15
760 Views
Last Modified: 2011-09-20
How can I immeidately force everyone to change their password in my domain? Without going to everyone's individual account in active directory...
0
Comment
Question by:darovitz
  • 8
  • 7
15 Comments
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 500 total points
ID: 17838931
you want everyone....

dsquery user "DC=Domain, DC=Local" | dsmod user -mustchpwd yes

next time they log off they will have to change

you want to do it straight off then use psshutdown to force them to log off......
0
 

Author Comment

by:darovitz
ID: 17839414
Do I have to run those commands from run from a serve, does it matter which oner?

Where do I run psshutdown?
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17839424
you should run it on your DC but you can do it from an xp client if needed, psshutdown should be run from the server but you need to download from sysinternals
0
 

Author Comment

by:darovitz
ID: 17839459
Will it shut down my servers also... because I don't want that...
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17839476
you specify who you want it to shutdown/logoff
0
 

Author Comment

by:darovitz
ID: 17839770
This is what I got


Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Melanie Putnam>dsquery user "DC=Domain, DC=Local" | ds
mod user -mustchpwd yes
dsquery failed:A referral was returned from the server.
type dsquery /? for help.dsmod failed:`Target object for this command' is missin
g.
type dsmod /? for help.
C:\Documents and Settings\Melanie Putnam>



0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17839897
you need to change the domain and local entries to your domain name :)
0
Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

 

Author Comment

by:darovitz
ID: 17839919
dsquery user | ds mod user -mustchpwd yes

I did this but can't tell if it worked
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17839935
check a user account and see if the tickbox for change password on next log on is ticked
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17839938
you need to use the full command though
0
 

Author Comment

by:darovitz
ID: 17839952
It says dsmod suceeded but says BUT has a default limit of 100 results to display as follows:

Dsquery has reached the default limit of 100 results to display; use the -limit
option to display more results.

Does this mean all the accounts have been reset or just the 100 I can view?
0
 

Author Comment

by:darovitz
ID: 17839968
It worked.  Thanks.. saves me the time of going through every account.
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17839972
its done everything just displaying 100 :)
0
 

Author Comment

by:darovitz
ID: 17839980
No, actually your right.  I checked a few and it looked like it did, but now I see it is sporadic.

How do I get it to do all accounts?
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17839995
use the option               -limit 0
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Sometimes you might need to configure routing based not only on destination IP address, but also on a combination of destination IP address (or hostname) and destination port number. I will describe a method how to accomplish this with free tools. …
We recently endured a series of broadcast storms that caused our ISP to shut us down for brief periods of time. After going through a multitude of tests, we determined that the issue was related to Intel NIC drivers on some new HP desktop computers …
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now