Domain password change policy

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Simon Church (anonymous_at_discussions.microsoft.com)
Date: 03/04/04 

Date: Wed, 3 Mar 2004 18:09:40 -0800

Hello,

we have a windows 2000 AD domain with 400+ users.
Currently, we have no domain password change policy in
place and are about to implement one. In order to do so, I
need help with the following:
 - all user accounts have the setting "password never
expires" enabled and some also have the setting "user
cannot change password" enabled. Is there a way that I can
deselect these settings on all the user accounts without
having to do into each one individually?
 - once I have implemented a maximum age for passwords, is
there a way that I can monitor the ages of passwords for
all accounts in AD?

Please advise.

Thanks,

Simon

Relevant Pages

  • Domain password change policy
    ... we have no domain password change policy in ... deselect these settings on all the user accounts without ... - once I have implemented a maximum age for passwords, ...
    (microsoft.public.win2000.security)
  • Domain passowrd change policy
    ... we have no domain password change policy in ... deselect these settings on all the user accounts without ... - once I have implemented a maximum age for passwords, ...
    (microsoft.public.win2000.security)
  • Domain password change policy
    ... we have no domain password change policy in ... deselect these settings on all the user accounts without ... - once I have implemented a maximum age for passwords, ...
    (microsoft.public.win2000.group_policy)