Multiple User password change 1

[jezza33]

On a Windows 2000 Domain Controller, I'm stuck on how to get around 500 user accounts to reset their passwords at next logon.

Can anyone advise how to do this?

 

[wolluf]

use the net user command?
Suggestion:- run it in enquiry mode to get list of users - pipe to a text file (eg net user > users.txt.

Multiple edit the users.txt file to create a batch file to set passwords to expire so they'll need changing at next logon.

http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q251394&

 

[jezza33]

Hi Wolluf - thanks for the hint.

I used the "net user" command to create the users in the first place, but am unsure on what the command is to get the users to change their password at next logon. Any advice?

 

[wolluf]

sorry - I misread the knowledgebase article - thought you could set password expiry date - but in fact its account expiry date.

would the net accounts command be any use - you could set maximum password age to 1 day, so following day all users would have to change their password - then set it back to value you want normally.

NET ACCOUNTS [/FORCELOGOFF:{minutes | NO}] [/MINPWLEN:length]
[/MAXPWAGE:{days | UNLIMITED}] [/MINPWAGE:days]
[/UNIQUEPW:number] [/DOMAIN]


NET ACCOUNTS updates the user accounts database and modifies password
and logon requirements for all accounts.
When used without options, NET ACCOUNTS displays the current settings for
password, logon limitations, and domain information.

Two conditions are required in order for options used with
NET ACCOUNTS to take effect:

þ The password and logon requirements are only effective if user
accounts have been set up (use User Manager or the NET USER command).

þ The Net Logon service must be running on all servers in the domain
that verify logon. Net Logon is started automatically when Windows
starts.

/FORCELOGOFF:{minutes | NO} Sets the number of minutes a user has
before being forced to log off when the
account expires or valid logon hours expire.
NO, the default, prevents forced logoff.
/MINPWLEN:length Sets the minimum number of characters for
a password. The range is 0-14 characters;
the default is 6 characters.
/MAXPWAGE:{days | UNLIMITED} Sets the maximum number of days that a
password is valid. No limit is specified
by using UNLIMITED. /MAXPWAGE can't be less
than /MINPWAGE. The range is 1-999; the
default is 90 days.
/MINPWAGE:days Sets the minimum number of days that must
pass before a user can change a password.
A value of 0 sets no minimum time. The range
is 0-999; the default is 0 days. /MINPWAGE
can't be more than /MAXPWAGE.
/UNIQUEPW:number Requires that a user's passwords be unique
through the specified number of password
changes. The maximum value is 24.
/DOMAIN Performs the operation on a domain
controller of the current domain. Otherwise,
the operation is performed on the local
computer.