Guest Haggis Posted October 15, 2008 Posted October 15, 2008 Is there some way i can force a group of users on the domain to have their password expire in 2 weeks without changing the Domain policy and affecting other users. The reason for this is that, for some time we have had a group of users that passwords never expire, now we want to enforce password expiry along with the rest of the domain. However, i do not want to wait for the 180 days before they have to change it. i also do not want to set 'change password at next logon' as these particular users are mobile PDA users and have access to a network PC only occasionally. So once 'change password at next logon' is set, and their device queries our mail server, their password will have to be changed. I need a 2 or 3 week buffer, which will be enough time for them to have used an office PC to change password in the expiration warning time.
Guest Pegasus \(MVP\) Posted October 16, 2008 Posted October 16, 2008 Re: set password expiry to a few weeks. "Haggis" <Haggis@discussions.microsoft.com> wrote in message news:0F1C8B9E-12EF-470D-8572-9EACF0F508BB@microsoft.com... > Is there some way i can force a group of users on the domain to have their > password expire in 2 weeks without changing the Domain policy and > affecting > other users. > > The reason for this is that, for some time we have had a group of users > that > passwords never expire, now we want to enforce password expiry along with > the > rest of the domain. However, i do not want to wait for the 180 days before > they have to change it. i also do not want to set 'change password at next > logon' as these particular users are mobile PDA users and have access to a > network PC only occasionally. So once 'change password at next logon' is > set, > and their device queries our mail server, their password will have to be > changed. I need a 2 or 3 week buffer, which will be enough time for them > to > have used an office PC to change password in the expiration warning time. You could run this command a number of times: net user JSmith /domain /expires:10/31/2008 and this one to check your work: net user JSmith
Guest Haggis Posted October 17, 2008 Posted October 17, 2008 Re: set password expiry to a few weeks. This is to expire the actual account, not the password, is this right? "Pegasus (MVP)" wrote: > > "Haggis" <Haggis@discussions.microsoft.com> wrote in message > news:0F1C8B9E-12EF-470D-8572-9EACF0F508BB@microsoft.com... > > Is there some way i can force a group of users on the domain to have their > > password expire in 2 weeks without changing the Domain policy and > > affecting > > other users. > > > > The reason for this is that, for some time we have had a group of users > > that > > passwords never expire, now we want to enforce password expiry along with > > the > > rest of the domain. However, i do not want to wait for the 180 days before > > they have to change it. i also do not want to set 'change password at next > > logon' as these particular users are mobile PDA users and have access to a > > network PC only occasionally. So once 'change password at next logon' is > > set, > > and their device queries our mail server, their password will have to be > > changed. I need a 2 or 3 week buffer, which will be enough time for them > > to > > have used an office PC to change password in the expiration warning time. > > You could run this command a number of times: > net user JSmith /domain /expires:10/31/2008 > > and this one to check your work: > net user JSmith > > >
Guest Pegasus \(MVP\) Posted October 17, 2008 Posted October 17, 2008 Re: set password expiry to a few weeks. Doh . . . so it does! "Haggis" <Haggis@discussions.microsoft.com> wrote in message news:D7200327-3512-4B3C-AA76-A66B3C7AA99F@microsoft.com... > This is to expire the actual account, not the password, is this right? > > "Pegasus (MVP)" wrote: > >> >> "Haggis" <Haggis@discussions.microsoft.com> wrote in message >> news:0F1C8B9E-12EF-470D-8572-9EACF0F508BB@microsoft.com... >> > Is there some way i can force a group of users on the domain to have >> > their >> > password expire in 2 weeks without changing the Domain policy and >> > affecting >> > other users. >> > >> > The reason for this is that, for some time we have had a group of users >> > that >> > passwords never expire, now we want to enforce password expiry along >> > with >> > the >> > rest of the domain. However, i do not want to wait for the 180 days >> > before >> > they have to change it. i also do not want to set 'change password at >> > next >> > logon' as these particular users are mobile PDA users and have access >> > to a >> > network PC only occasionally. So once 'change password at next logon' >> > is >> > set, >> > and their device queries our mail server, their password will have to >> > be >> > changed. I need a 2 or 3 week buffer, which will be enough time for >> > them >> > to >> > have used an office PC to change password in the expiration warning >> > time. >> >> You could run this command a number of times: >> net user JSmith /domain /expires:10/31/2008 >> >> and this one to check your work: >> net user JSmith >> >> >>
Recommended Posts