Re: AD Script to set passwords to expire in 10 days

From: "Joe Richards [MVP]" <humorexpress@xxxxxxxxxxx>
Date: Fri, 05 Jan 2007 19:06:21 -0500

That is up to you, the most popular choice is to send the person emails. Anything else and you are inventing a delivery mechanism.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net

---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm

Andrea wrote:

Thanks for the input everyone. Hmmm...so there's no way to set multiple
user's passwords to expire in 10 days and not immediately...Is there no
way to script a countdown with a message box maybe? How does the user
get the prompt to change their password before it expires?

Andrea

References:
- AD Script to set passwords to expire in 10 days
  - From: Andrea
- Re: AD Script to set passwords to expire in 10 days
  - From: Joe Kaplan
- Re: AD Script to set passwords to expire in 10 days
  - From: Jorge Silva
- Re: AD Script to set passwords to expire in 10 days
  - From: Joe Kaplan
- Re: AD Script to set passwords to expire in 10 days
  - From: Jorge Silva
- Re: AD Script to set passwords to expire in 10 days
  - From: Joe Richards [MVP]
- Re: AD Script to set passwords to expire in 10 days
  - From: Joe Kaplan
- Re: AD Script to set passwords to expire in 10 days
  - From: Andrea

Prev by Date: Re: In domain.company.com "domain" is not technically a child in a single domain 1 DC AD?
Next by Date: Re: Users
Previous by thread: Re: AD Script to set passwords to expire in 10 days
Next by thread: Reload DNS from AD recovers wrong IP address for host - pls help
Index(es):
- Date
- Thread

Relevant Pages

Re: How To Enabling a Password Policy
... > passwords is on the system configuration side not the ... limited testing running this on a Win2K Pro workstation to force admins ... to change their passwords over X days old (set on PDC). ... ::Avoid admins whose accounts are set never to expire. ...
(microsoft.public.win2000.security)
Re: Local Administrator Account
... Joe Richards Microsoft MVP Windows Server Directory Services ... Use different passwords on the accounts if you don't want the admin on one machine to access resources on another machine. ... I logged into the XP workstation as the local administrator. ... I remember this was an issue in the NT domain days when you could log on to other domains with if the administrator account and passwords were the same. ...
(microsoft.public.windows.server.security)
Re: Group Policys and Passwords
... Either you have two separate domains or you are implementing it at a local ... There is only one pw policy per domain.... ... it's not a great idea to have all passwords expire the same day. ...
(microsoft.public.windows.server.general)
Re: Password expirey
... Passwords expire based on the pwdlastset time being older than the current date minus the domain password policy. ... So yes, if you get all of the passwords expired and set in time, when you turn on the policy, no one will expire until their password age hits the date. ...
(microsoft.public.windows.server.active_directory)
Re: Password expiration message?
... The FTP server userid is specifically non-TSO-enabled. ... a report of IDs with passwords about to expire, and for the ones that you care about you issue ALTUSER whatever-id PASSWORDNOEXPIRED ... Or, you make those IDs have non-expiring passwords, and change them at your convenience, rather than every normal interval of time. ... Or you use something like SFTP (provided on z/OS by OpenSSH) and its public/private key support to avoid password expiration. ...
(bit.listserv.ibm-main)