Windows Server 2016 notify administrator when user changes computer network password

Member_2_5306354
Member_2_5306354 used Ask the Experts™
on
I would like to be notified when users change their login password.
(Systems are networked with Windows Server 2016, in AD)
And I would like to prevent all users from changing their password.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Shreedhar EtteTechnical Manager
Top Expert 2010

Commented:
You can achieve this using GPO:
How to Configure a Site, Domain, or Organizational Unit to Prevent Users from Changing Passwords Unless Prompted:
1. On AD Server Click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
2. Right-click the domain or organizational unit for which you want to implement the new password change policy, and then click Properties.
3. Click the Group Policy tab.
4. Click the Group Policy object (GPO) that you want to work with, and then click Edit. If there are no existing policies listed in the Group Policy Object Links list, click New to create a new policy, type a name for the new policy, and then click Edit.
5. Expand the GPO, expand User Configuration, expand Administrative Templates, and then expand System.
6. Click Ctrl+Alt+Del Options.
7. In the right pane, double-click Remove Change Password.
8. Click Enabled, and then click OK.
9. Quit the Group Policy Object Editor snap-in, click OK, and then quit the Active Directory Users and Computers snap-in.
10. Click Start, and then click Run End user desktop or the policy will apply after log off / login.
11. Type cmd in the Open box, and then click OK.
12. At the command prompt, type the following line, and then press ENTER:
gpupdate /target:user /force
13. Type exit to close the command prompt.
MaheshArchitect
Distinguished Expert 2018

Commented:
This will not stop users to set password when password expires

May we know what you want to achieve exactly
You could set minimum password age just behind maximmum password age and it will prevent password change prompt
Technical Specialist
Awarded 2017
Distinguished Expert 2018
Commented:
And I would like to prevent all users from changing their password.
Please don't. But if you have to, enable User cannot change password on individual accounts in conjunction with a Password never expires
Prevent-users-from-changing-Password.jpg
As for being notified on password change, you can modify this script
https://www.experts-exchange.com/articles/32998/Two-way-Password-Synchronization-from-one-Active-Directory-Domain-to-another-using-DSInternals.html

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial