I'm okay with a command line (I grew up in the days of DOS), but given a choice 
I generally prefer a GUI.

Of course, there are some tasks that just don't lend themselves easily to GUIs.




From: KenM [mailto:[email protected]]
Sent: Thursday, March 05, 2009 8:34 AM
To: NT System Admin Issues
Subject: Re: Changing Account Settings en Masse

John

It sounds like you do not like the command line. There are a few other options 
for this. I am assuming you are running 2003. Using DSA you can highlight 
multiple users in a OU and make this change. You could also create a search 
query for user objects and highlight the ones you want and make the change. My 
preferance would be using a either a vbscript or adfind\admod though.





On Thu, Mar 5, 2009 at 6:50 AM, John Hornbuckle 
<[email protected]<mailto:[email protected]>> 
wrote:

Thanks!





From: !Amado Abenojar [mailto:[email protected]<mailto:[email protected]>]
Sent: Wednesday, March 04, 2009 8:15 PM

To: NT System Admin Issues
Subject: RE: Changing Account Settings en Masse



Try "dsquery" and pipe it into "dsmod" in the command line.

i.e.

dsquery user "OU=Employees, DC=Domain, DC=Com" -stalepassword 60 | dsmod user 
-mustchpwd yes

this command line queries users in the Employees OU who have not changed their 
password in 60 days and pipes the list to dsmod which configures each object 
with "User must change password at next logon"

regards

Amado Abenojar
MCSE,MCSA

======================

________________________________

From: [email protected]<mailto:[email protected]>
To: 
[email protected]<mailto:[email protected]>
Date: Tue, 3 Mar 2009 18:43:11 -0500
Subject: Changing Account Settings en Masse

We've previously not allowed users to change their own passwords; we've handled 
that for them, and in Active Directory have their accounts configured to 
prevent them from doing it.



We're implementing some new policies now, and in the near future users will 
need to be able to change their own passwords.



I feel sure there's a way for me to enable this capability without having to 
launch ADUC and bring up each user's account individually.



Could one of you command line commandos give me a point in the right direction?


John Hornbuckle

MIS Department

Taylor County School District

www.taylor.k12.fl.us<http://www.taylor.k12.fl.us/>

















~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Reply via email to