In AD users and computers , I was checking a user account and viewed their properties, if you go onto the security tab of properties, go down to everyone, it has change password ticked in grey? Does that mean everyone can change this users password?
And if so can they do that with NET commands or would they need access to ADUC console?
I need to check this is an issue before reporting it! Is it as simple in ADUC as right clicking the account and "reset password"? And applying a new one?
Is there anyway to run a monster report to see any other accounts where the everyone group can change their password!