?
Solved

How to set all active directory user accounts to user cannot change password?

Posted on 2015-02-19
2
Medium Priority
?
164 Views
Last Modified: 2015-03-06
I just applied the dsquery user command to apply the "Password never expires" for all my user accounts on my DC. I want to be able to do the same for all the accounts for the "User cannot change password" attribute. Can someone give me the command for that please.
0
Comment
Question by:StosSpiro
2 Comments
 
LVL 1

Expert Comment

by:Itxx
ID: 40618703
Does it have to be with command line?
Otherwise, in Active Directory you can make a query.

Query root: *.local
Define query: you could use: Name - Is Not - zzzzzz.
That would give all the users.

Select them all, right click, properties and change the desired settings.
If you change the password settings on the Account tab don't forget to check both checkboxes.
0
 
LVL 53

Accepted Solution

by:
Will Szymkowski earned 2000 total points
ID: 40619084
You can do this via powershell very easily. Use the below command..
Import-module activedirectory
Get-ADUser -filter * | Set-ADUser -CannotChangePassword $true

Open in new window


Will.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

615 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question