Staff Laptop Logon

[simonstubbsets]

Hi All.

 

Our primary school staff are currently logging onto their school provided laptops as their AD user accounts. they are admins on them, but use network printers, drives, etc... most schools are going for the 360Safe status around us, so they want to change their passwords every 90 days. question is, how do we get the staff laptops (which we see) to change their passwords so the teachers don't loose access to their home drive, staffshare, schoolshare, printers, Sims, etc... is there a simple way for us (onsite on a rota - not every day) to do this?

 

Thanks very much.

[dloudon96]

As long as everything is mapped via group policy (printers, home drives, school share) then you just need to go in to group policy, the OU of the users, user policy, I think it's windows settings or something like that then security. I'll double check when I get to work.

[DavR]

Usually your password policy will be in your Default Domain Policy, unless you've severely customised your network.

 

Open this up in GPMC, and the settings are under Computer Settings | Windows Settings | Security Settings | Account Policies/Password Policy. You should have a load of different options around password age, length and complexity here.

 

You may also want to check if the teacher accounts have "Password never expires" checked in AD.





[TwistedHelixis]

The first thing I need to know is what version of server os are you using?

 

Then you can create a gpo that will change the password every x days but only for specific groups as you may not want the pupils having the same settings. (I would not edit the default domain policy as it will effect all users including pupils, unless that's what you want)

Edited September 27, 2016 by TwistedHelixis