Solved

Enable complex password and force all users to change their password asap.

Posted on 2015-02-17
2
404 Views
Last Modified: 2015-04-02
Hello,

We are in a Windows 2008 environment with windows 2003 domain functional level.

We want to enable password complexity in our domain policy.  

How do we trigger the change to happen right the way to force the all the users to specify a complex password?  

Please advise.
0
Comment
Question by:nav2567
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 53

Accepted Solution

by:
Will Szymkowski earned 250 total points
ID: 40615506
To force a reset you will need to use dsquery user | dsmod user -mustchpwd yes command. Personally I would not do this. I would create the password complexity policy, find the users where their passwordLastSet attribute is. Then send out an email notification to tell users to change there password.

Once the password complexity policy has been set you can also use the PasswordLastSet to find out which users have in fact reset/changed their password.

Use the below command below
get-aduser -filter * -properties passwordlastset, passwordneverexpires | sort name | ft Name, passwordlastset, Passwordneverexpires

Open in new window


Will.
0
 
LVL 13

Assisted Solution

by:Natty Greg
Natty Greg earned 250 total points
ID: 40615842
Set the password policy, along with the complexity and you can also type a note within the settings notifying the user they must change their password and the minimum length required. all can be done in group policy and force group policy from domain controller everyone will have to comply. set it so that on their next logon they have to change their password.
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Active Directory Disappeared 2 50
Force Updates from WSUS 5 52
Copy files and run psex to windows 7 only 14 50
Exchange 2010 permissions issue 8 28
Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question