Discussion Locked

Active Directory force password change

0 helpful
3 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a small 2003 Netowrk and XP sp2 clients. I open active directory and go to a users profile and check the box that says "User must change password at next login" but the user is not asked to change their password at next login. It is not until the user logs in once then logs out then logs in again that it asks the user to change password. It does not matter if the user waits 5 minutes or 5 days. It does not matter if the user is an admin or regular user. It does not matter if the user is in an OU with Group policy or not. The AD does not force the password change on the next login but will after the user logs in and out once then it works. It also won't run the users login script after the check box for "Change password" is checked.

3 replies

by sgt_shultz

as cg says its 'by design'. why don't you force them off with net logoff or with a time constraint? then they'd have to log on again and change their password

by rlfry

I am also having this problem. I have a new install of AD on 2008 servers. Users are spererated by OUs, but there is nothing fancy about the setup. No GPOs being applied. I am also having the same problem with the login script. Users have to reboot 2x to get the script to run correctly. All XP pro clients. ???

This discussion is closed to new replies.