Troy,
Can't reason why you wouldn't allow users to change there passwords and frequently, based on password policy you have in place. Again this is an organizational thing, not really going to get into it, but its not a good security practice, and leaves you open to attack ( usually social engineering, shoulder surfing etc etc in the long run). Doesn't show you your previous settings when doing a bulk change? What previous settings are you talking about? Z ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, January 07, 2008 2:12 PM To: Active Directory Admin Issues Subject: RE: GPO for Resetting Passwords Looks like you can do multiple selections (user accounts), and do a bulk change. One thing I noticed is that I do not allow the users in this particular OU to change their passwords. In the bulk selection it doesn't show my previous settings. Wonder what would happen? Troy Adkins Network Administrator Virginia House of Delegates 804.698.1567 (O) 804.771.7917 (F) "Beckett, William (Bill)" <[EMAIL PROTECTED]> 01/07/2008 02:08 PM Please respond to "Active Directory Admin Issues" <[email protected]> To "Active Directory Admin Issues" <[email protected]> cc Subject RE: GPO for Resetting Passwords I thought you could make bulk changes like that in a 2003 domain, not via GPO but in AD ________________________________ From: Ziots, Edward [mailto:[EMAIL PROTECTED] Sent: Monday, January 07, 2008 2:03 PM To: Active Directory Admin Issues Subject: RE: GPO for Resetting Passwords I am pretty sure you can do a bulk change password of those users in the OU ( Highlight multiple users, right click and click change password at next logon, but not force them to change there password via GPO. Password policies are Domain-Wide, not OU wide. You would have to set the policy at the Domain Policy Level and specify the password reuse, length, complexity at this level. ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, January 07, 2008 1:59 PM To: Active Directory Admin Issues Subject: GPO for Resetting Passwords I would like to force a group (in an OU of Active Directory) of users to key a new password when they logon. Along with that, they cannot use the previous password. Can that be done through a GPO? Thanks... Troy Troy Adkins Network Administrator Virginia House of Delegates 804.698.1567 (O) 804.771.7917 (F) ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~ ~ ~ ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~ ~ ~ ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~ ~ ~ ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~ ~ ~ ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~ ~ <http://www.sunbelt-software.com/product.cfm?id=400> ~
