Scirpt - all accounts be prompted to reset password?

[bran2235]

Hello, everyone-

Does anyone have a script I can run that will set the "require user to reset password at next login" option for all user accounts?


Thanks,
Brandon

 

[IllogicallyLogical]

See if this one will work for you.

dsquery user domainroot | dsmod user -mustchpwd yes


Joey
A+, MCP

 

[bran2235]

I'm willing to try but not on my entire domain

What would the cmd be to just try a single user?

THANKS!
Brandon

 

[IllogicallyLogical]

Try this one for a single user where username= the users login name. You could also use the users UPN.

dsquery user -u domain\username | dsmod user -mustchpwd yes

Joey
A+, MCP

 

[KRPGroup]

Why can you just use AD Users and Compupters, select all users you want to force a password change and check the box that says User must change password on next logon

 

[bran2235]

I need to change about 900 users ... at once... via a script if possible..

Here's the question... Is there a script I can use that I CAN SPECIFY each user... maybe a batch file that just reads one line at a time?

Thanks!!
Brandon

 

[58sniper]

With all due respect, you'd spend more time just writing a batch file than if you followed KRPGroup's suggest and just highlight all of the users and do it at one time (or at least do the users in a specific OU at one time).

And, FWIW, you don't need to dsquery before using dsmod.

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[KRPGroup]

Using AD you have more control immediately (no testing) and if your using OU's you can do one at a time as well for further control and tracking whom has been done. Shift or CTRL your users 2 or 100+ users at a time...

 

[bran2235]

Yes, but I would have to do this OU by OU *(thanks M$)*

 

[KRPGroup]

To do everyone in the domain you ca use the Find feature in AD Users/Computer and then use the adv tab to really filter staff. Then you can select all at once, just be careful not to get system accounts, Administrators etc.. But again you can use the adv filter and use the conditions there eg "Is Not" to filter any accounts by many dif fields depending on how much you fill out.