We've not yet moved to a defined password policy...basically stayed with the default options. I want to force my users to change every 180 days without having the entire domain change on the same day. I tested that option this morning with the default domain policy and quickly discovered that all domain users were getting prompted to change; at least those who have not changed in the past 180 days which is mostly everyone. I "assumed" that the 180 day counter would begin starting today; I did not think of it being retroactive and going backwards to search for those who haven't changed in the prior 180 days.
I had planned on then going to each user's AD profile alphabetically and forcing a new password upon their next logon. That way I could somehow manage how many users would have to change per day and not all 1200 user accounts kick in at the same time.
Is there a method in place that someone would be wiling to share?
I had planned on then going to each user's AD profile alphabetically and forcing a new password upon their next logon. That way I could somehow manage how many users would have to change per day and not all 1200 user accounts kick in at the same time.
Is there a method in place that someone would be wiling to share?
