Quick background. My organization recently changed from Lotus Notes to Microsoft Outlook. I have some production users that were formerly using Lotus Webmail that will be using Outlook WebApp. With Notes it used the users internet credentials to authenticate. That password never expired, it was easy to show these people how to check it.
The machines they are using have generic windows logins. Outlook uses AD credentials to authenticate and that password must be changed every 45 days. These users do not use AD account, so they will not be prompted. So every 45 days that means I will have to call help desk have their password reset and then find a computer somewhere and login as them one time, just to change their password. I have rights to add them to groups, but not to change their password.
Is there a systematic way (script) that I could automate this, put in in a scheduled task that every 40 days it will increment their password by 1? Example this time there password is Jdoe1 and next time it is Jdoe2, etc. I have tried a few of the CMD line examples to change password, but it seems you have to be domain admin to run them.
dsquery user -samid DoeJ | dsmod user -pwd Pa$$word1!
net user DoeJ Pa$$word1! /domain
These are the two variations that I have seen. I have tried a few different ways to get it to work but no dice. I have the users own username/password and I'd like to change it without having to go to a desktop to do it. Any ideas?
