Solved

Active directory Group Policy

Posted on 2016-08-24
3
61 Views
Last Modified: 2016-09-20
I have to force the users to change their password to 8 charactors at next logon due to some security concerns.But i have also some service accounts running with normal user accounts.
I have more than 700 Users.
Please give me any script  or the best way which exclude the service accounts and domain admin accounts and then force all other users to change their password at next logon with 8 characters,
0
Comment
Question by:kastro Abbasi
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 6

Accepted Solution

by:
sAMAccountName earned 500 total points
ID: 41769461
You can use security group membership to your advantage when filtering Group Policies.  Just thinking superficially, you could update the password policy for the domain (Or if your functional level supports it, create fine grained policies) via GPO, then use a script to force change passwd at next login for all users except those in target groups (Domain Admins, Service Accounts etc).

of course, this is a fairly simple approach, but perhaps something you could build on...  The actual Powershell would be fairly easy
0
 
LVL 35

Expert Comment

by:Seth Simmons
ID: 41806182
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Accept: sAMAccountName (https:#a41769461)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

seth2740
Experts-Exchange Cleanup Volunteer
0

Featured Post

Creating Instructional Tutorials  

For Any Use & On Any Platform

Contextual Guidance at the moment of need helps your employees/users adopt software o& achieve even the most complex tasks instantly. Boost knowledge retention, software adoption & employee engagement with easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question