I am writing a self service password reset tool for users in my test domain. I would like them to be able to change passwords and not generate a random password.
I am using dsmod with a service account to change user passwords and it was working fine, (ie was throwing an error when setting a user's password to a previous one or if the password wasn't complex enough).
dsquery user -samid someuser | dsmod user -pwd somepassword -mustchpwd no
For some reason today it will take any password and change it. Changing through the GUI is enforcing policies.
Does anyone know what is going on or how to enforce this with another tool?