Force Password change (Delegate control)

[Guest]

With the MS article:
http://support.microsoft.com/default.aspx?scid=KB;en-us;296999, Select "Reset
Password", Read pwdLastSet, Write pwdLastSet", I will able to delegate "reset
/ force password change" to staff.

Questions:
The option "User must change password at Next Logon" is only available in
the User's property, Account options area.
What sub-set of attribute can be selected to make this "User must change
password at Next Logon" option availabe in the Reset password windows. (In
the MMC, Right-click user acccount, Reset Passsword...)

Thanks,

Vincent

 

[Joe Richards [MVP]]

Granting WP to pwdLastSet should be enough.

I have filed this as a bug.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm

 

[Herb Martin]

---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm

Hey, is that book released yet?

Is this the Cat and Kittens book?

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

 

[Guest]

Hi, Joe,

Thanks for the reply.
By the way, what is "WP"? I have selected "Read,Write" on "pwLastSet". But
that "User must change password at Next Logon" option was gray out in the
Reset password windows. or like you mention, is a bug?

Thanks,

Vincent

 

[Guest]

One more thing, I thought it works but not. Even "force password change"
option is available in the Account property page, i selected it. That does
not force the user to change the password.

It must have some way to delegate this function.

Thanks,

Vincent

 

[Joe Richards [MVP]]

Yep, been on the shelves since late January.

It is selling like hotcakes and I am getting a ton of positive feedback.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm

 

[Joe Richards [MVP]]

WP is write property.

Bug.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm

 

[Joe Richards [MVP]]

You can use scripts or command line tools...

For instance

admod -b userdn pwdlastset::0

will expire an ID.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm

 

[Herb Martin]

Yep, been on the shelves since late January.

It is selling like hotcakes and I am getting a ton of positive feedback.

Very cool. I will look for it.

There hasn't been an AD book worth buying in YEARS.

(And earlier editions of your book were one of only two
books I ever really liked.)