darovitz
asked on
Force everyone to change their password
How can I immeidately force everyone to change their password in my domain? Without going to everyone's individual account in active directory...
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
you should run it on your DC but you can do it from an xp client if needed, psshutdown should be run from the server but you need to download from sysinternals
ASKER
Will it shut down my servers also... because I don't want that...
you specify who you want it to shutdown/logoff
ASKER
This is what I got
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\Melanie Putnam>dsquery user "DC=Domain, DC=Local" | ds
mod user -mustchpwd yes
dsquery failed:A referral was returned from the server.
type dsquery /? for help.dsmod failed:`Target object for this command' is missin
g.
type dsmod /? for help.
C:\Documents and Settings\Melanie Putnam>
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\Melanie Putnam>dsquery user "DC=Domain, DC=Local" | ds
mod user -mustchpwd yes
dsquery failed:A referral was returned from the server.
type dsquery /? for help.dsmod failed:`Target object for this command' is missin
g.
type dsmod /? for help.
C:\Documents and Settings\Melanie Putnam>
you need to change the domain and local entries to your domain name :)
ASKER
dsquery user | ds mod user -mustchpwd yes
I did this but can't tell if it worked
I did this but can't tell if it worked
check a user account and see if the tickbox for change password on next log on is ticked
you need to use the full command though
ASKER
It says dsmod suceeded but says BUT has a default limit of 100 results to display as follows:
Dsquery has reached the default limit of 100 results to display; use the -limit
option to display more results.
Does this mean all the accounts have been reset or just the 100 I can view?
Dsquery has reached the default limit of 100 results to display; use the -limit
option to display more results.
Does this mean all the accounts have been reset or just the 100 I can view?
ASKER
It worked. Thanks.. saves me the time of going through every account.
its done everything just displaying 100 :)
ASKER
No, actually your right. I checked a few and it looked like it did, but now I see it is sporadic.
How do I get it to do all accounts?
How do I get it to do all accounts?
use the option -limit 0
ASKER
Where do I run psshutdown?