This setting is controlled by the pwdLastSet attribute. If the value is set to zero, the user must change the password at next logon. A script would be the easiest way to do this for a number of users. For a sample, see:
http://www.lsg.musin.de/Admin/win2000/Administrationsskripte/user_must_change_password_at_next.htm Tony ---------- Original Message ---------------------------------- From: "Jose&Laura" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Mon, 28 Oct 2002 18:30:46 +0900 For security reasons we had to force a password change at next login. I know how to accomplish this easily in NT 4.0, but I couldn't figure this out in AD, I have over 4K in user accounts, I'll even take doing one OU at a time. Any ideas? Thanks Jose Gomez List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/