Active directory Group Policy

I have to force the users to change their password to 8 charactors at next logon due to some security concerns.But i have also some service accounts running with normal user accounts.
I have more than 700 Users.
Please give me any script  or the best way which exclude the service accounts and domain admin accounts and then force all other users to change their password at next logon with 8 characters,
kastro AbbasiAsked:
Who is Participating?
sAMAccountNameConnect With a Mentor Sr. Systems EngineerCommented:
You can use security group membership to your advantage when filtering Group Policies.  Just thinking superficially, you could update the password policy for the domain (Or if your functional level supports it, create fine grained policies) via GPO, then use a script to force change passwd at next login for all users except those in target groups (Domain Admins, Service Accounts etc).

of course, this is a fairly simple approach, but perhaps something you could build on...  The actual Powershell would be fairly easy
Seth SimmonsSr. Systems AdministratorCommented:
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Accept: sAMAccountName (https:#a41769461)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

Experts-Exchange Cleanup Volunteer
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.