i want to achieve the following --
We have Active Directory Environment :--
1) A user has forgot the password and comes to me.
2) I reset his password and make sure he changes it during logon.
Now if the user does not login say for another 2-3 hours then the IT person who has resetted his password can mis-use it.
Is there a provision in AD where the password which is resetted and the user did not login gets locked again ?