RM Unify and bulk password change

[mikelj99]

We are in a school where the same generic AD password has - lazily - been given out to multiple students

Students have Chromebooks with GApps / Unify

We can enforce an immediate password change on all students in AD, but not sure what'd happen next time they tried to log in via Unify

And we also need to force them to change their passwords on a regular basis (school policy)

 

Any ideas ?

TIA

[Edu-IT]

I’m pretty sure marking passwords as expired will work and force them to choose a new PW. Create a new test user and try, to be sure.

[jmak]

It's a while since I used Unify, but ours was synched to our AD. There was an application/service installed on our DC which included a management console. As long as that's running, you should be OK. I'm pretty sure that it's a periodic synch rather than a live check, so you'd want to either force a synch (using the application on the DC) or reset the password out of hours with an overnight synch.

[Boredguy]

If you have the AD Sync running then Unify should pick up the new AD password once it takes effect on your network.

Depending which version of Windows server you are running you can set different password policies so that your students (and staff) have to reset their password every X number of days and what complexity level they need to use.