RE: active directory password policy

From: Vedran Matica (Vedran.Matica_at_span.hr)
Date: 02/08/05

  • Next message: James Eaton-Lee: "RE: active directory password policy"
    Date: Tue, 8 Feb 2005 09:37:13 +0100
    To: <focus-ms@securityfocus.com>
    
    

    There is a script on Microsoft' Script Center that will help you to list
    when a password expires for a specific user.

    http://www.microsoft.com/technet/scriptcenter/scripts/ad/users/pwds/uspw
    vb08.mspx

    With some scripting knowledge you can modify it so it lists all users
    and even send e-mail to "critical users".

    Best regards,

    Vedran Matica, MCSA

    -----Original Message-----
    From: William Stegman [mailto:stegmanw@comcast.net]
    Sent: Friday, February 04, 2005 11:10 PM
    To: focus-ms@securityfocus.com
    Subject: active directory password policy

    Does anyone have any experience with remote users who do not login to
    the domain on a regular basis or at all, and have a password expiration
    policy in effect? We can't seem to come up with a good plan to handle
    these users. They only occassionally access domain resources such as
    webmail via the Internet or an internal website to do timesheets via
    vpn, and will not have the luxury of logging on to a machine connected
    to our LAN and getting the warning about soon to expire passwords. If
    our policy dictates passwords expire every 90 days, how can we avoid the

    inevitable calls regarding password resets?

    thx

    /William Stegman - Network Administrator///

    TransCore - Hummelstownd

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------


  • Next message: James Eaton-Lee: "RE: active directory password policy"
  • Quantcast