Re: Force Password change (Delegate control)

Tech-Archive recommends: Fix windows errors by optimizing your registry

Granting WP to pwdLastSet should be enough.

I have filed this as a bug.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm



Vincent wrote:
With the MS article: http://support.microsoft.com/default.aspx?scid=KB;en-us;296999, Select "Reset Password", Read pwdLastSet, Write pwdLastSet", I will able to delegate "reset / force password change" to staff.

Questions:
The option "User must change password at Next Logon" is only available in the User's property, Account options area.
What sub-set of attribute can be selected to make this "User must change password at Next Logon" option availabe in the Reset password windows. (In the MMC, Right-click user acccount, Reset Passsword...)

Thanks,

Vincent
.

Relevant Pages

  • Re: Force Password change (Delegate control)
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... that "User must change password at Next Logon" option was gray out in the Reset password windows. ... The option "User must change password at Next Logon" is only available in the User's property, ...
    (microsoft.public.win2000.active_directory)
  • Re: Force Password change (Delegate control)
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... that "User must change password at Next Logon" option was gray out in the Reset password windows. ... The option "User must change password at Next Logon" is only available in the User's property, ...
    (microsoft.public.win2000.active_directory)
  • Re: Force password change permission
    ... You only need WP to pwdLastSet to ... > force an account to have to change its password. ... > which is far more rights than reset password and force to change on next logon. ... >>>user these permissions, and the permissions appear correct in the ACL (has ...
    (microsoft.public.windows.server.active_directory)
  • Re: Force Password change (Delegate control)
    ... Vincent wrote: ... "Reset Password", Read pwdLastSet, Write pwdLastSet", I will able to ... password at Next Logon" option availabe in the Reset password windows. ...
    (microsoft.public.win2000.active_directory)