2
votes
1answer
297 views

When does password expire when unchecking “Password never expires”

On a Windows Server 2008 R2 AD, if you uncheck the account option "Password never expires" on a User Account, does the password expire instantly, or does it get set to the period defined in the ...
2
votes
2answers
60 views

AD LDAP No Password Required

I've got a question about AD accounts that have the setting PASSWD_NOTREQD enabled on them. What exactly does this setting do? From my own research, it appears that this will cause the account to ...
1
vote
2answers
79 views

Logging in as another user in Windows without resetting their password?

If you own the administrator account on Windows Domain, is there a way of logging into a user account without resetting the password? We have users that log in remotely, and I need to work on their ...
0
votes
2answers
68 views

Active Directory Self Service Password Reset

I have a large group of AD users and I need to provide them with a method for changing their own password in case they forget them. I am looking a third party self password reset application to enable ...
3
votes
2answers
97 views

Active Directory - How to find what machine applied a GPO

I've got a GPO that is configured to change the local builtin Administrator's password on certain machines. I need to find what machines have applied this GPO to themselves. I've written a script that ...
1
vote
0answers
197 views

Windows - user must change password on next logon: “current password” and “new password” boxes do not appear

I have a SBS2011 domain and Windows 7 laptops. I created a user on the domain, set a temporary password and ticked the box to force the user to change password at next logon. Sit at the user's desk ...
3
votes
1answer
372 views

Disabling Password Complexity for OU and C# App creating AD accounts

I created a C# app that is creating a series of AD accounts from a database. The issue i am running into is the passwords i am gathering had no complexity requirements so when i am passing them into ...
3
votes
2answers
112 views

Changing Active Directory Password Setting “Reversible Encryption” Effect on existing accounts

There is a setting in active directory password to turn on or off "reversible encryption". Currently I have this feature turned on, and I am planning to turn it off. What effect will this have on the ...
2
votes
2answers
189 views

How can I randomize or stagger password expiration through Active Directory?

We are about to implement a new password policy that will require users to change their password every six months. We also need every user to change their password this week. I'd rather not create a ...
1
vote
2answers
606 views

How to Force domain users to change password now

How can I force all domain users to change their password now? I want to do so before users next logon. Thanks
3
votes
2answers
976 views

What is the rationale for a minimum password age?

I just had a user unable to change his password on a Windows 2008 domain. It was giving him a cryptic message about complexity requirements even though he was certain his chosen password was meeting ...
2
votes
2answers
270 views

Developing a Password Sync Plugin for Active Directory

Recently i came across through password sync plug-ins provided by many identity management provider vendors (Tivoli, Oracle, CA) they provide a password sync plug-in which we will install on every ...
-3
votes
2answers
310 views

Saving Active Directory Passwords [closed]

I have a requirement for one of my clients that they would like all user passwords stored in the Description field of AD. Now this is all well and good initially because we use a script to roll out ...
3
votes
1answer
430 views

No password is complex enough

I have one user in my AD domain who seems to not be able to self-select a password. I may have another one, but they're on a different enough password-expiration schedule that I can't remember who it ...
1
vote
2answers
236 views

How can I determine why a users password change did not succeed?

I've set up a new domain user account for one of our client's employees. I randomly generated a password for the user account and set it up so the user has to change the password on first log in. We ...
0
votes
3answers
2k views

Is there a way to reset the password for a list of Active Directory users en-mass?

I have a list of user accounts that need their password reset to a default password (also users will be required to change the password at first login). Is there a way to reset the password for a list ...
1
vote
2answers
430 views

Change AD-Password from client by console / VBScript

I have an AD-environment, but a few machines are used as workgroup-machines (and I can't change this). My target is to have a script which changes the AD-Password on the server from a client ...
0
votes
2answers
186 views

Multiple Passwords in Active Directory

Is there a possibility to store a second password in the Windows Active Directory? I mean an attribute which has the same behavoir as the unicodeWPD field.
3
votes
2answers
177 views

Allow AD user to set passwords but no other attributes

I need an Active Directory user that can set passwords of other users but only passwords and not other attributes of the users. How can I configure that?
0
votes
1answer
104 views

Admin Password Changed, Need to Revert

Im kinda new to network administration. I was asked to change the password on our SQL Server. The only account that is used to log in is the Administrator account. I did a dumb thing and reset ...
6
votes
2answers
469 views

How to save/restore a Windows AD password?

We often have to tweak, test, or repair some software when the users are not there. For example, today one of us set up a new mail account on a user's computer, but the user is on holiday. This then ...
1
vote
2answers
8k views

AD User Passwords expiring without any notifications?

We setup password Policies in Active Directory to Expire peoples passwords after so many days. Well it looks like the time has come for the Expiration of the Passwords and people are getting locked ...
5
votes
1answer
477 views

How to enable password challenge in Active Directory?

As IT Support, my team is taking so much time reseting passwords. So, we thought it would be interesting to enable some sort of Password Challenge in Active Directory so users could reset their own ...
0
votes
3answers
844 views

Password Policy seems to be ignored for new Domain on Windows Server 2008 R2

I have set up a new Windows Server 2008 R2 domain controller, and have attempted to configure the Default Domain Policy to permit all types of passwords. When I want to create a new user (just a ...
1
vote
3answers
2k views

Is there a way to make many AD Users change their password at next logon? Rather than setting this for each user one at a time?

I want practically all of my AD users in my organization to change their password the next time they log in. I have roughly 160 users. I would also like to not include a few select members. Is there a ...
3
votes
2answers
321 views

Changing Windows password policy [closed]

We currently have the almost defacto standard of requiring complex passwords on our Windows AD domain. But this XKCD cartoon caught my eye a few months ago when it came up on Coding Horror (I think): ...
6
votes
6answers
1k views

Back up and restore Active Directory password per user

For administrative purposes, I sometimes need to log in as another user to diagnose a problem with their account. I'd like to be able to do this without having to change their password so I don't ...
0
votes
3answers
696 views

Using admin credentials to log on as a user vs. storing passwords

Our office uses a Windows Domain with Active Directory to manage user access to machines and network resources. The IT staff maintains a record of everyone user's password, which is used mainly for ...
2
votes
1answer
2k views

Active Directory GPO for Password Policy Not Applying from Default Domain Policy

Ok. I have implemented a Password Policy. I know from previous posts that it cannot be applied from within an OU so I have configured it from the Default Domain Policy. I run RSOP.msc from a client ...
0
votes
2answers
3k views

Change an Active Directory password in C#

At first, please forgive my English, it is not my mother tongue. Then, here is my problem: I'm working on a web platform that manage the Active Directory. I can create, delete, edit a group, user, ...
5
votes
1answer
77 views

Services Accounts

We have a service account that is a member of the domain admins group. This is something that makes me exceptionally uncomfortable. I am looking to change this as soon as possible but am fairly new ...
2
votes
2answers
335 views

Active Directory and OpenLDAP user database integration

I need some guidance with AD and OpenLDAP user database integration/synchronization. Here is what I am trying to do. We have Full Linux database (Ubuntu 10.4) with users on OpenLDAP and using only ...
1
vote
3answers
531 views

Any way to see an Active Directory password?

Before you jump to conclusions, let me explain. We have a password reset tool that is not working. For some reason when you use it, it resets your password to some unknown value (Not what you changed ...
2
votes
3answers
2k views

Active Directory New password policy - should I wait?

I am going to enforce a new password policy on our domain. The main issue I have is should I wait for the max time to pass for the user to change his current password, or to enforce the: change at ...
0
votes
2answers
216 views

force use of specific passwords

We are migrating Active Directory from from Windows Server 2003 to 2008 shortly. With 2008 we would like to be able to use a separate password policy for a particular group of PCs. One suggested ...
3
votes
3answers
170 views

Password recovery

An employee has just recently quit. I have access to our domain control of which active directory sits upon. Unfortunately the employee did not leave us with his password to log into his local ...
6
votes
5answers
16k views

How to change the current user's domain password without being domain admin?

I've seen plenty of documentation of how to reset a user's password by running net user <username> * /domain or locally net user <username> <new_password> But I am not domain ...
1
vote
2answers
172 views

How to create a password-less service account in AD?

Is it possible to create domain accounts that can only be accessed via a domain administrator or similar access? The goal is to create domain users that have certain network access based on their ...
3
votes
1answer
1k views

Can I Make Password Change Reminders More Obvious

In Windows 7 and Windows 2008 is appears that Microsoft changed how users would be reminded about upcoming password expirations. In Windows XP the password expiration was very obvious. There was a ...
1
vote
2answers
775 views

Active Directory userPassword attribute

I've read a little around the subject of the userPassword attribute in AD and how it can be set as a write-alias for unicodePwd. We're considering moving from OpenLDAP to AD. I can extract the ...
2
votes
2answers
641 views

Windows password length warning

Our group recently implemented 14+ character passwords on our Windows domain in order for us to be compliant with our organizational security directives. On password change, users are now receiving a ...
2
votes
5answers
3k views

Change domain password from non-domain computer (AD)

I have a domain controller on Windows Server 2008. When I set up my users, I gave them all a dummy password with the "must change on next login" checked. Everyone's machine is all on the same ...
0
votes
3answers
4k views

Domain account keeps getting locked out [closed]

Is there a way to determine why my domain account keeps getting locked out? I keep finding myself locking my machine then coming back, trying to log in and getting the "Your account has been locked ...
1
vote
4answers
2k views

Disabling a user's ability to change password on Active Directory

We run a multi-directory environment (AD and OpenLDAP) and perform password synchronization via an internal webapp. This works well because we've disabled users from changing their own password via ...
2
votes
2answers
550 views

Streamline Active Directory account creation via automated web site

In my company we have high employee turnover, and hence our helpdesk receives about a dozen requests per week for new Active Directory accounts. Currently, we receive these requests simply via e-mail ...
5
votes
2answers
803 views

Windows Active Directory - Implement a password policy. What will happen to current passwords?

I want to implement a stronger password policy for our Windows 2003 domain. My question is, what will happen to the currently existing passwords that do not match the new policy: will the users be ...
2
votes
4answers
668 views

Password expiration notice for Active Directory

Are there any tools/apps/scripts out there that will do password expiry notification for Windows 2008 Active Directory credentials? This is needed for our web apps that use Active Directory for LDAP ...
2
votes
2answers
384 views

User friendly password reset tool [closed]

I need a user friendly way for non-technical people to reset another persons password in Active Directory. The use case for this is a school where the lab supervisors need the ability to reset a ...
4
votes
2answers
266 views

Migrate Linux Passwords into Active Directory

I have a lot of boxes that are all local user accounts. We want to start consolidating them into an Active Directory system. (I know... I know.. It has to be Active Directory, not openldap, kerberos ...
2
votes
4answers
770 views

What would cause a domain user password change to take 30 minutes?

A few times over the last few months, users have complained about extremely long password change wait times. I can't find anything about this anywhere. Is there a common cause for something like ...