Go Back   TechArena Community > Technical Support > Computer Help > Windows Server > Active Directory
Become a Member!
Forgot your username/password?
Tags Active Topics RSS Search Mark Forums Read

Sponsored Links



user password group policy

Active Directory


Reply
 
Thread Tools Search this Thread
  #1  
Old 14-10-2008
Member
 
Join Date: Sep 2005
Posts: 19
user password group policy

On our Windows 2003 Server / Domain there are more than 80 users connected. Somehow I want to apply a new password policy for all users connected to this domain. The only problem I am facing is few users have set their password to Never Expire. So I wanted to know if I apply the new policy, will it effect these users as well who have set passwords to never expire option? Or will they get any prompt message about my newly applied policy?

Thanks for all suggestions.

Reply With Quote
  #2  
Old 14-10-2008
Member
 
Join Date: Sep 2004
Posts: 59
Re: user password group policy

Nope, it will not override the users "password never expires" settings. You will need to manually change their user properties one by one. If you remove this, then only your new Policy will take effect.
Reply With Quote
  #3  
Old 14-10-2008
Member
 
Join Date: Sep 2004
Posts: 73
RE: user password group policy

Hello Oldmans. You will need to first create a list of users who have set their passwords to never expire. Once done, you will need to change / modify their properties and set it to password to expired. After doing the same, on Error Resume Next

Quote:
Set objConnection = CreateObject("ADODB.Connection")
Set objCommand = CreateObject("ADODB.Command")
objConnection.Provider = "ADsDSOObject"
objConnection.Open "Active Directory Provider"
Set objCommand.ActiveConnection = objConnection

objCommand.Properties("Page Size") = 1000

objCommand.CommandText = _
"<LDAP://dc=fabrikam,dc=com>;" & _

"(&(objectCategory=User)(userAccountControl:1.2.840.113556.1.4.803:=65536));"
& _
"Name;Subtree"
Set objRecordSet = objCommand.Execute

objRecordSet.MoveFirst
Do Until objRecordSet.EOF
Wscript.Echo objRecordSet.Fields("Name").Value
Set objUser = GetObject("LDAP://CN=" & objRecordSet.Fields("Name").Value
&",OU=Users,DC=Fabrikam,DC=com")
objUser.pwdLastSet = 0
objUser.SetInfo
objRecordSet.MoveNext
Loop
Reply With Quote
  #4  
Old 14-10-2008
Member
 
Join Date: Sep 2004
Posts: 128
Re: user password group policy

You just need to create a saved query\custom query with this syntax in your in dsa.msc:

Quote:
(&(objectCategory=person)(objectClass=user)(userAccountControl:1.2.840.113556.1.4.803:=65536))
This will be placed in your Users computers and you can simply run it anytime by clicking on it.
Reply With Quote
  #5  
Old 14-10-2008
Member
 
Join Date: Sep 2005
Posts: 19
Re: user password group policy

thanks everyone! Very helpful.
Reply With Quote
Reply

  TechArena Community > Technical Support > Computer Help > Windows Server > Active Directory
Tags: , ,



Thread Tools Search this Thread
Search this Thread:

Advanced Search


Similar Threads for: "user password group policy"
Thread Thread Starter Forum Replies Last Post
Using local group policy to override domain group policy Nickason Active Directory 3 28-09-2011 04:20 AM
Use group policy to change local administrator password in Domain coady Active Directory 4 29-12-2010 11:20 AM
Group policy not applying to user configuration jean Active Directory 3 25-07-2009 12:36 PM
Restriction password - Group policy ameer123 Networking & Security 2 18-11-2008 03:01 PM
Group Policy - Maximum Password Age Meng R Active Directory 2 21-08-2008 12:06 AM


All times are GMT +5.5. The time now is 09:56 PM.