<div>
... and THERE it is. I knew it was something simple. I just COULD NOT recall it for the life of me. &quot;Password never expires&quot; checkbox was checked in ADUC.
</div>


... and THERE it is. I knew it was something simple. I just COULD NOT recall it for the life of me. "Password never expires" checkbox was checked in ADUC.

<div>
<div class="content wysiwyg-content">
I know the answer is simple, but I'm having a brain fart. In Active Directory on Server 2012 R2 Standard, I as a domain administrator cannot check the box requiring a user to change his password at next logon while resetting his password. It's grayed out.<br />
<br />
I am trying to delegate access to an OU so that Help Desk users can reset passwords (done) and force the user to set a new one on logon (not done). In troubleshooting it, I realized that not even a domain admin can do it!<br />
<br />
What has to be changed to get this box to be clickable?
</div>
</div>


I know the answer is simple, but I'm having a brain fart. In Active Directory on Server 2012 R2 Standard, I as a domain administrator cannot check the box requiring a user to change his password at next logon while resetting his password. It's grayed out.

I am trying to delegate access to an OU so that Help Desk users can reset passwords (done) and force the user to set a new one on logon (not done). In troubleshooting it, I realized that not even a domain admin can do it!

What has to be changed to get this box to be clickable?

User Must Change Password at Next Logon Grayed Out

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.