?
Solved

Forcing "User must change password at next logon"

Posted on 2015-01-21
4
Medium Priority
?
1,352 Views
Last Modified: 2015-01-24
Hi,

In Users and Computers in Windows 2003 i've checked  "User must change password at next logon" - the goal obviously is when a machine is powered on the user has to change thier password. We do require this to be for the 'administrator' user. When the machine is powered on although this message appears users can go around it by simply clicking No at the prompt "Your password expires today. Do you want to change it now?" How can i force passwords to be changed for the administrator user?
0
Comment
Question by:deepi19
  • 2
  • 2
4 Comments
 
LVL 24

Expert Comment

by:Radhakrishnan R
ID: 40563933
Hi,

This is the same way as normal user. One thing you need to change is, if you select the option "Password never expires" then the "User must change password at next logon" doesn't work as this is not required since the other option is already set.

So, remove the "Password never expires" for the administrator user and then enable  "User must change password at next logon". Logoff and see it works?
0
 

Author Comment

by:deepi19
ID: 40564122
Hi there,

Yes seems to work ok for normal users but 'Administrator' seems exempt in that you always get the option to say No to changing your password. I assume there's a registry setting somewhere but i cant find it. I'm also not using AD or anything like that in this network so need this to work in stand alone machines.
0
 
LVL 24

Accepted Solution

by:
Radhakrishnan R earned 1500 total points
ID: 40564170
Hi,

I don't think there is a registry policy to set this. There are settings which controlled by GPO's. Start>>run>>gpedit.msc>Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy - You can see the minimum password age 0, if you set this to 0 then the user will be forced to change the password but unfortunately it's not recommended as the setting will force user to change password each time they login.

If you still think that it's controlled by registry then I am out of ideas.
0
 

Author Closing Comment

by:deepi19
ID: 40568310
Thanks, i think you're right, in the end i just went with a new admin user account.
0

Featured Post

Receive 1:1 tech help

Solve your biggest tech problems alongside global tech experts with 1:1 help.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A simple method to resolve a "keyboard not working" problem by modifying the Windows registry. This issue can often be encountered after using the VMware vCenter Converter Standalone Agent to perform a Physical-to-Virtual (P2V) conversion process.
In current releases of Windows 10, MS removed the ability to format a volume with ReFS. That feature is moved to Windows 10 Pro for Workstations. The requisite files exist in Pro, but functionality is locked and/or otherwise unavailable. A $125 upgr…
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Suggested Courses

600 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question