Re: Forcing Users To Change Passwords

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



If I go into Active Directory, I can see where I can force the user to
change his password at the next logon...but how can I change it so that
each
user is forced to change their password every 30 days?

Edit the account policies for the domain.

See:
http://support.microsoft.com/kb/885119/en-us

Also, each user account specifies that their password will never expire,
do
I have to go change each of these user accounts? Or will some sort of
Group
Policy override this?

You should remove this because it will cause the account policies to be
ignored.


hth
DDS

"RayRedSoxFan" <RayRedSoxFan@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:04FC1705-3EAF-4DD7-AC0C-9B9186CC6C64@xxxxxxxxxxxxxxxx
We didn't used to have a policy whereby users were forced to change
passwords
at given intervals, but we want to start doing that.

If I go into Active Directory, I can see where I can force the user to
change his password at the next logon...but how can I change it so that
each
user is forced to change their password every 30 days?

Also, each user account specifies that their password will never expire,
do
I have to go change each of these user accounts? Or will some sort of
Group
Policy override this?

Thanks


.



Relevant Pages

  • Re: Group policy basics
    ... sort of confusing. ... You will have to link your group policies to OUs that you newly create. ... you put your user accounts. ...
    (microsoft.public.win2000.active_directory)
  • Enabled Users in Active Directory
    ... I would like to know what user accounts in Active Directory are enabled ... sort of document. ... All the sample code I've found just writes it to ...
    (microsoft.public.windows.server.scripting)
  • Bulk import of user accounts
    ... I need to perform a bulk import of user accounts into a Windows 2003 Active ... I keep getting errors of one sort or another. ...
    (microsoft.public.win2000.active_directory)
  • Account names do not correspond to group names in Outlook 2003
    ... I have created two e-mail accounts in Outlook, and when I sort the inbox by ... user accounts and then groups, the group names are not the same as the ...
    (microsoft.public.outlook)
  • Re: account lockout policy
    ... If you do create account policies at other ... they may apply to the local user accounts only on the machine that the policy ...
    (microsoft.public.win2000.security)