"User must change password" doesn't happen immediately.

From: Kiu Kian Wun (kiu_at_protocom.com)
Date: 06/22/04 

Date: 21 Jun 2004 22:10:15 -0700

Hi,

I have a server application that set user's password to expired so
that user will be prompted to change password on the next logon.

However, after the flag was set (verified in users account page) the
user was not immediately prompted to change password when he logs on.
He has to log off and back on again before seeing the password change
dlg box. Its seems to me that the flag was only recognized/honoured on
second logon attempt.

Can someone please advise on how I can "force" password change to
happen immediately and not on the second logon attempt? Or is this the
normal behaviour?

Much thanks,
Kiu.

Relevant Pages

  • RE: No password expiration message/Cant change password
    ... Default Domain Policy: Local policies-security options: All that shows ... Policy: Network Security: Force logoff when logon hours expire. ... At first I get a Must Change Password notice, Click Change Password, get ... > Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • "User must change password" doesnt happen immediately.
    ... that user will be prompted to change password on the next logon. ... user was not immediately prompted to change password when he logs on. ... happen immediately and not on the second logon attempt? ...
    (microsoft.public.windows.server.security)
  • Re: Force PW change with notice
    ... Domain accounts and a very large number of mobile users. ... > 'Change password at next logon is no good' as it doesn't provide enough ... Hi Navigato, ... cant "logon using dial up networking") when the password expires they cannot ...
    (microsoft.public.security)
  • Re: Set "Password never expires" on users in a specific OU?
    ... You should not assign values directly to the userAccountControl attribute. ... user must change it the next time they logon on. ... ' Check if user must change password at next logon. ... I pieced this together from some other scripts I have.... ...
    (microsoft.public.scripting.vbscript)
  • RE: ADMT - password questions
    ... > I understand that you want to disable the "User Must Change password at ... > next logon" option when using ADMT to migrate user account with password. ... The preferred solution is to use a registry key to control ... > 2 - more secure behavior, client can''t use OWF password change API. ...
    (microsoft.public.windows.server.migration)