A couple of months ago, I created more than 500 user accounts in Active Directory. The accounts were created with a static password, assigned to each user, and they were included in the script that created the user accounts. The problem is that I wasn't told to set the passwords to "never expire," and now the passwords are expiring, and the help desk is pitching a fit. Setting 500+ user accounts with the "password never expires" property set is trivial. The problem is "unexpiring" the passwords on all those accounts. The help desk doesn't want to reset the passwords on all those accounts, and frankly I can't blame them.
Short of deleting and then recreating the accounts, then setting them so the password never expires, does anyone have an idea, tool, or script for "unexpiring" those passwords without being forced to reset the passwords?
Thanks in advance!