set password expiry to a few weeks.

[Haggis]

Is there some way i can force a group of users on the domain to have their
password expire in 2 weeks without changing the Domain policy and affecting
other users.

The reason for this is that, for some time we have had a group of users that
passwords never expire, now we want to enforce password expiry along with the
rest of the domain. However, i do not want to wait for the 180 days before
they have to change it. i also do not want to set 'change password at next
logon' as these particular users are mobile PDA users and have access to a
network PC only occasionally. So once 'change password at next logon' is set,
and their device queries our mail server, their password will have to be
changed. I need a 2 or 3 week buffer, which will be enough time for them to
have used an office PC to change password in the expiration warning time.

 

[Pegasus \(MVP\)]

Is there some way i can force a group of users on the domain to have their
password expire in 2 weeks without changing the Domain policy and
affecting
other users.

The reason for this is that, for some time we have had a group of users
that
passwords never expire, now we want to enforce password expiry along with
the
rest of the domain. However, i do not want to wait for the 180 days before
they have to change it. i also do not want to set 'change password at next
logon' as these particular users are mobile PDA users and have access to a
network PC only occasionally. So once 'change password at next logon' is
set,
and their device queries our mail server, their password will have to be
changed. I need a 2 or 3 week buffer, which will be enough time for them
to
have used an office PC to change password in the expiration warning time.

You could run this command a number of times:
net user JSmith /domain /expires:10/31/2008

and this one to check your work:
net user JSmith

 

[Haggis]

This is to expire the actual account, not the password, is this right?

 

[Pegasus \(MVP\)]

Doh . . . so it does!

This is to expire the actual account, not the password, is this right?