Monday, 13 April 2015

Active Directory - Modify all users in an OU to "Password Never Expires"



change password at next logon
1. However - If your users do not have this ticked then you can set this option on an entire OU by executing the following command;
dsquery user "OU={your target OU},DC={your domain},DC={your domain extension}" | dsmod user -pwdneverexpires yes
Update: Note: If your OU has more than 100 users in it you need to add the '-limit' flag, and set it to a number greater than your actual amount of users, e.g.
dsquery user "OU={your target OU},DC={your domain},DC={your domain extension}" -limit 2000 | dsmod user -pwdneverexpires yes
pwdneverexpire
2. Now your users will have this option set.
password never expires

No comments:

Post a Comment