Solved

Force everyone to change their password

Posted on 2006-10-30
15
752 Views
Last Modified: 2011-09-20
How can I immeidately force everyone to change their password in my domain? Without going to everyone's individual account in active directory...
0
Comment
Question by:darovitz
  • 8
  • 7
15 Comments
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 500 total points
ID: 17838931
you want everyone....

dsquery user "DC=Domain, DC=Local" | dsmod user -mustchpwd yes

next time they log off they will have to change

you want to do it straight off then use psshutdown to force them to log off......
0
 

Author Comment

by:darovitz
ID: 17839414
Do I have to run those commands from run from a serve, does it matter which oner?

Where do I run psshutdown?
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17839424
you should run it on your DC but you can do it from an xp client if needed, psshutdown should be run from the server but you need to download from sysinternals
0
 

Author Comment

by:darovitz
ID: 17839459
Will it shut down my servers also... because I don't want that...
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17839476
you specify who you want it to shutdown/logoff
0
 

Author Comment

by:darovitz
ID: 17839770
This is what I got


Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Melanie Putnam>dsquery user "DC=Domain, DC=Local" | ds
mod user -mustchpwd yes
dsquery failed:A referral was returned from the server.
type dsquery /? for help.dsmod failed:`Target object for this command' is missin
g.
type dsmod /? for help.
C:\Documents and Settings\Melanie Putnam>



0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17839897
you need to change the domain and local entries to your domain name :)
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 

Author Comment

by:darovitz
ID: 17839919
dsquery user | ds mod user -mustchpwd yes

I did this but can't tell if it worked
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17839935
check a user account and see if the tickbox for change password on next log on is ticked
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17839938
you need to use the full command though
0
 

Author Comment

by:darovitz
ID: 17839952
It says dsmod suceeded but says BUT has a default limit of 100 results to display as follows:

Dsquery has reached the default limit of 100 results to display; use the -limit
option to display more results.

Does this mean all the accounts have been reset or just the 100 I can view?
0
 

Author Comment

by:darovitz
ID: 17839968
It worked.  Thanks.. saves me the time of going through every account.
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17839972
its done everything just displaying 100 :)
0
 

Author Comment

by:darovitz
ID: 17839980
No, actually your right.  I checked a few and it looked like it did, but now I see it is sporadic.

How do I get it to do all accounts?
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17839995
use the option               -limit 0
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

Downtime reduced, data recovered by utilizing an Experts Exchange Business Account Challenge The United States Marine Corps employs more than 200,000 active-duty Marines with operations in four continents, all requiring complex networking system…
Are you one of those front-line IT Service Desk staff fielding calls, replying to emails, all-the-while working to resolve end-user technological nightmares? I am! That's why I have put together this brief overview of tools and techniques I use in o…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now