Forcing a password change

[TwistedHelixis]

Our 2012R2 server is setup to force a complex password change every 6 months, but I have just realized the next change will happen over Christmas so I would like to force the password change for all users now.

 

Is this possible? and if so does it reset the 6 month counter or would they still get asked to change passwords over Christmas anyway?

 

Cheers

[Steve21]

There's a script you can run that flags all users to the change password on next logon, which will reset it back to the counter e.g. 6 months.

 

Think it was a technet one I used before, will look for it.

 

Steve

[TwistedHelixis]

Thanks @Steve21

[RLR]

You can select all users in an OU > Right Click > Properties > Account > tick the tick box for user must change password at next logon. Doing it this way will depend on the size of your school I guess but is a quick manual process.

[TwistedHelixis]

You can select all users in an OU > Right Click > Properties > Account > tick the tick box for user must change password at next logon. Doing it this way will depend on the size of your school I guess but is a quick manual process.

 

Only a few primary schools so not large.

 

We use Active Directory Admin Center to set the complex passwords, would this method reset the clock so my users will not get requested for a password change over Christmas?

[TwistedHelixis]

Anyone able to answer the post above?

[ADMaster]

No, this will make them change their password now, the the clock is set to another six months.

 

With teachers coming in August to prepare for the new school year my six months is usually August - February.

 

If your staff are not in over Christmas they will just get asked to change it when they return in January.

 

If you want to stop the clock select all users, right click properties account tab and tick password never expires.

Then don't forget to un tick this box in January.

 

Personally I'd leave it alone most of my staff don't need their hands held to change a password. However I've had this setup for several years now, if this is your first year a reminder email before Christmas break would be good.