Force Password change

[StephenK]

Hello

 

Anyone know of any way we can force Microsoft Password changes on a specific date (if it is possible) , rather than after a set number of days

 

Stephen

[Norphy]

I don't think it's possible without some scripting. An AD account has a "PasswordLastSet" attribute and the domain will have a policy which defines maximum/minimum password age. Your computer will then know to force a password change from that.

 

The closest I think you'll be able to get is to run a script using a scheduled task which sets the "PasswordExpired" attribute, which is the same as ticking the "User must change password at next logon" box in the account properties in ADUC.

[paulkerton]

Forcing a regular password change is not recommended anymore anyway.

 

https://www.ncsc.gov.uk/collection/passwords/updating-your-approach

[Oaktech]

I suppose you could script something to run at midnight on the day in question and just raise the 'user must change password at next logon' flag?

[QwertyMash]

Unless you are doing this for a specific reason I would avoid forced password resets - Please see the NCSC Gov website for more info (in fact PaulKerton has linked you directly).

 

However if this is for a specific task, such as to reimplement a higher password requirement etc and you want everyone to set new passwords this one time I'd recommend just writing a Powershell script.

[Marylin]

https://www.windowscentral.com/how-force-users-change-their-password-periodically-windows-10

[QwertyMash]

https://www.windowscentral.com/how-force-users-change-their-password-periodically-windows-10

 

Those are all number of days sadly - the OP wanted a specific date. I think his best bet is to just use a script to expire the passwords in Active Directory on a set date.