Discussion Locked

Force Reset all passwords?

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
How can I force reset all the passwords on my network? we are changing the password length and want all users to change their passwords at the same time. Windows 2000 active directory.

5 replies

by bfilmfan

Assuming that you changed the password length in the Default Domain Policy, then you should force an immediate GPO update to all systems with the command:

SECEDIT /REFRESHPOLICY MACHINE_POLICY /ENFORCE

You could call that command via a login script to ensure everyone logging in would get the new settings.

This batch script will change the user's password to one of your choice and then force them to change the password:

@echo off
set /p DN=Enter distinguished name of user in quotes:
set /p PWD=Enter new password for user:
dsmod user %DN% -canchpwd yes -pwdneverexpires no
dsmod user %DN% -pwd %PWD% -mustchpwd yes

You can see more details here at:
http://www.windowsdevcenter.com/pub/a/windows/2004/03/30/serverhacks_passwords.html?page=last&x-maxdepth=0

By the way, TR has a deal for members on the O'Reilly's Hacks books at the moment.

Enjoy!

by wdeklerk

To change local admin passwords, you can use this script:
Copy the script to a txt file and change the ext. to .
sorry the script is 3000 c and we only have space for 2000
I will post it on my site:
http://www.allgold.org/script.htm
to change domain passwords use a GPO,

Default Domain Policy
Computer Configuration
Windows Settings
Security Settings
Account Policies/
Password Policy
Policy Setting
Maximum password age 1 day
Minimum password age 1

and change the policy to one day

This discussion is closed to new replies.