Re: Group password reset

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 09/30/05


Date: Thu, 29 Sep 2005 17:24:33 -0500

Do you have a Windows 2003 domain controller?? --- Steve

"Jon LaBarge" <jonlabarge@comcast.net> wrote in message
news:eJhYrNUxFHA.628@TK2MSFTNGP10.phx.gbl...
> Sigh....
>
> Alas, the group select option will not work.
>
>
> "Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
> news:3d6dnUWf9-NcyKHeRVn-uQ@comcast.com...
>> If you have a Window 2003 domain controller you can do that with Active
>> Directory Users and Computers. I believe you highlight all the user
>> accounts, select properties, and then select user must change password at
>> next logon. I am going by memory so it may be a little more complicated
>> [not much] than that but that should get you started in the general
>> direction. You can also use the AD command line tools for dsquery for
>> user and dsmod for users of which you can pipe the results from dsquery
>> to dsmod. Use | between two commands with space before and after to pipe.
>> If you have a Windows 2000 domain you still can use the AD command line
>> tools if you install adminpak for Windows 2003 [free download from MS]
>> onto a Windows XP Pro domain computer and logon as a domain administrator
>> or use runas for those tools.
>>
>> You might want to rethink doing all the accounts in one day. Maybe do a
>> fourth or so the first day to see how it goes so as to not flood support
>> with calls. Be sure users are educated as to what the requirements are
>> for new passwords with specific examples. You might be surprised to find
>> out how hard users find this to be. --- Steve
>>
>> http://www.ss64.com/nt/dsmod.html -- dsmod example.
>>
>> "Jon LaBarge" <jonlabarge@comcast.net> wrote in message
>> news:e%23vqG0SxFHA.612@TK2MSFTNGP10.phx.gbl...
>>> Is there a way to force all users in AD to reset their password at the
>>> next logon without having to do each account 1 by 1? We have implemented
>>> PassFilt Pro SPE and I would like for all user to change their passwords
>>> to meet the new complexity requirements on the go-live day. Any
>>> suggestions?
>>>
>>> Thx,
>>>
>>> Jon
>>>
>>
>>
>
>



Relevant Pages

  • Re: Lisp/Unix impedance [a programming challenge]
    ... >> You can't pipe a command into xterm. ... You can't pipe a Web ... desktop on Red Hat Linux almost 10 years ago. ... developed a working style whih really suited the Windows ...
    (comp.lang.lisp)
  • Re: AD sites and services
    ... A search for "Active Directory Sites" yeilds the following: ... After an Unsuccessful Domain Controller Demotion" ... http://support.microsoft.com?kbid=220140 "FRS Replication Protocol and Topology ... Windows 2000 Domain Controllers" ...
    (microsoft.public.win2000.active_directory)
  • RE: Internet Connection Wizard failing at Firewall Config and Secu
    ... You can use the Dcdiag.exe (Domain Controller Diagnostic Tool) included ... in Windows Support Tools to verify the AD status. ... Windows Server 2003 Active Directory Diagnostics, ...
    (microsoft.public.windows.server.sbs)
  • Site-tosite VPN Issue
    ... Windows Server 2003 domain controller ... Mixture of PCs running Windows 2000 Profressional with SP3 and Windows XP ... the VPN to the Windows Server 2003 domain controller. ... 12.7MB file from the server to the client PC. ...
    (microsoft.public.windows.server.networking)
  • RE: join server 2003
    ... Cannot Promote a Windows Server 2003 Domain Controller into a Windows 2000 ... Make a backup of the schema master. ...
    (microsoft.public.win2000.networking)