Change password option

[Miha]

Hello

We would like to set permissions to all our domain users so they can change
their passwords.
Is there a way to generally set permissons (disable 'users cannot change
password' box)? and how?
Also, we want to configure our sistem to force password change upon 3 weeks
(to force users to change passwords)? and
password must be different from the one they use now.
I red that this must be done via Domain Group Policy? Are there certain
steps that I must follow?

Thank you all in advance for help and support
Best regards
Miha

 

[Jerold Schulman]

Hello

We would like to set permissions to all our domain users so they can change
their passwords.
Is there a way to generally set permissons (disable 'users cannot change
password' box)? and how?
Also, we want to configure our sistem to force password change upon 3 weeks
(to force users to change passwords)? and
password must be different from the one they use now.
I red that this must be done via Domain Group Policy? Are there certain
steps that I must follow?

Thank you all in advance for help and support
Best regards
Miha

See http://support.microsoft.com?kbid=225230

If the users password is set to never expire, use netuser from tip 570
in the 'Tips & Tricks' at http://www.jsiinc.com and getusers.bat from
tip 7964, to run the following batch on your PDC emulator domain controller:

@echo off
setlocal
for /f "Tokens=*" %%u in ('getusers') do (
netuser "%%u" /pwnexp:n
)
endlocal



Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com

 

[Miha]

thanks

See http://support.microsoft.com?kbid=225230

If the users password is set to never expire, use netuser from tip 570
in the 'Tips & Tricks' at http://www.jsiinc.com and getusers.bat from
tip 7964, to run the following batch on your PDC emulator domain
controller:

@echo off
setlocal
for /f "Tokens=*" %%u in ('getusers') do (
netuser "%%u" /pwnexp:n
)
endlocal



Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com