Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We have an Active Directory network with a mixed environment of Macs and PCs, including some remote users who connect via VPN. We're trying to implement a password expiration policy, but we've run into the roadblock such that when a Mac's password is expired on AD, it can't connect period - no prompt or opportunity to change password, no nothing. This goes double for a VPN client synced with the domain password.

Surely there's a piece of middleware or something that bridges this gap. Any thoughts?

share|improve this question
1  
What do you mean by "Mac"? Please describe which version(s) of Mac OS X your clients are running. Starting with 10.6.8 AD password expiry (shows remaining days) and renewal is supported(tm). –  pfo Mar 30 '12 at 15:39
1  
I think that that information is largely part of the answer, and worth posting as an answer below. –  Chris B. Behrens Mar 30 '12 at 17:16
add comment

2 Answers

We have a scheduled task that runs daily and emails users at predefined password age intervals. E.g., if our password age is 90 days, email them at 75 days, 80, 83, 85, 87, and 89 days.

share|improve this answer
add comment

Take a look at ADPassMon It will notify the local user when a change is needed.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.