GSuite AD Sync and Password Sync - Asking to change password

[snagrat]

I’ve setup GSuite AD Sync and password sync.

 

It’s working fine in replicating password to GSuite bit when logging into GSuite users are asked to change their passwords.

 

Ideally I don’t want this. Have I missed a step?

[Arthur]

There's an option in GCDS not to force password changes or set a default password for new users.

[snagrat]

I’ve seen that and have now changed it.

 

But what about users already provisioned from AD as these are not new now.

[Badzeye]

I did this the other day for a few hundred users. Just removed them from G suite and re created them with that box to not force the user to change their password unticked. doesnt take long to re sync the affected users once you get them out of Gsuite.

[ChrisMiles]

G Suite's management capabilities are attrocious, you'll want to download and configure GAM from here asap https://github.com/jay0lee/GAM to allow easy bulk or scripted updates to G Suite data. You can easily remove the password set flag using this tool:

 

gam print users query "orgUnitPath='/Students'" | gam csv - gam update user ~primaryEmail changepassword off

[snagrat]

Just used gam - worked like charm!!