Link to home
Start Free TrialLog in
Avatar of mat7355
mat7355Flag for United States of America

asked on

Cannot force password change - SBS2008

In Exchange Management Console, I am trying to force my users to change their passwords today.  For 25 users, I browsed to Account Properties and checked the box which say "User must change password at next logon"

On only two of those users, I get the message below.

Any ideas what may be wrong?

Thanks!

--------------------------------------------------------
Microsoft Exchange Warning
--------------------------------------------------------
The following warning(s) occurred while saving changes:

set-user
Completed

Warning:
The command completed successfully but no settings of 'mydomain.local/MyBusiness/Users/SBSUsers/User Name' have been modified.


--------------------------------------------------------
OK
--------------------------------------------------------
ASKER CERTIFIED SOLUTION
Avatar of David Atkin
David Atkin
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of mat7355

ASKER

Thanks David.  It looks like that may work!  Can I ask you why?  I have inherited an administrators job so I am a novice.

Why shouldn't I force a password change from Exchange?

Thanks Again!
Hi mat7355, Active Directory (ADUC) is a database which consists of objects and attributes stored in the Active Directory schema. It's hierarchal meaning before the exchange account was created the user was created in ADCU.

More info here.
Microsoft Exchange in SBS 2008 is meant to be for email management only really.  

Managing user accounts and passwords etc needs to be done from Active Directory Users and Computers (ADUC).
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Olaf is correct here.  I don't know why but I missed the SBS title.  You can do this from ADUC as I first described but if the SBS Console has been setup correctly then getting to know the Console will benefit you greatly in administering the server.

I suggest that you use the console to add any new users opposed to ADUC.  Adding the users via the console will also create them an Exchange account and add them into the default SBS Groups - Something that the ADUC doesn't do.

Have a read of the below when you get time:
http://technet.microsoft.com/en-us/library/cc766565(v=ws.10).aspx

It explains how to admin various aspects of the server via the SBS Console.

Good luck
Avatar of mat7355

ASKER

Thanks guys.  I changed it by going to the ADUC and checking the box to force the user to change on next login.  It would not work for those two users when i tried to do it in the EMC.  

Usually I add new users using the SBS console and normally I have our passwords set to not expire.  It was time to force a change so I decided to use Exchange Management Console to click each user and check the box.

Wouldnt work on two random users for some reason.  I did manage to accomplish the same thing using ADUC.

Thanks for all the responses!
Avatar of mat7355

ASKER

Still not sure why I had the error in the first place.  But it works and that is important!