Solved

Active directory Group Policy

Posted on 2016-08-24
3
44 Views
Last Modified: 2016-09-20
I have to force the users to change their password to 8 charactors at next logon due to some security concerns.But i have also some service accounts running with normal user accounts.
I have more than 700 Users.
Please give me any script  or the best way which exclude the service accounts and domain admin accounts and then force all other users to change their password at next logon with 8 characters,
0
Comment
Question by:kastro Abbasi
3 Comments
 
LVL 6

Accepted Solution

by:
sAMAccountName earned 500 total points
ID: 41769461
You can use security group membership to your advantage when filtering Group Policies.  Just thinking superficially, you could update the password policy for the domain (Or if your functional level supports it, create fine grained policies) via GPO, then use a script to force change passwd at next login for all users except those in target groups (Domain Admins, Service Accounts etc).

of course, this is a fairly simple approach, but perhaps something you could build on...  The actual Powershell would be fairly easy
0
 
LVL 18

Expert Comment

by:Sushil Sonawane
ID: 41769978
0
 
LVL 34

Expert Comment

by:Seth Simmons
ID: 41806182
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Accept: sAMAccountName (https:#a41769461)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

seth2740
Experts-Exchange Cleanup Volunteer
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

832 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question