Active Directory Force All Users to Change Passwords on Next Login
-
Don't allow the users to choose when.
That's insanity, cause they may never log out.
-
@JaredBusch said in Active Directory Force All Users to Change Passwords on Next Login:
@DustinB3403 you are chasing ghosts and complicating a basic process for no real benefit.
You're leaving the house unlocked and money on the living room floor.
-
@DustinB3403 said in Active Directory Force All Users to Change Passwords on Next Login:
Don't allow the users to choose when.
That's insanity, cause they may never log out.
Who said anything about allowing the users to choose? This is setting the framework technically.
This has nothing to do with the reboot cycle.
That should be handled separately in a scenario like this.
-
@DustinB3403 said in Active Directory Force All Users to Change Passwords on Next Login:
@JaredBusch said in Active Directory Force All Users to Change Passwords on Next Login:
@DustinB3403 you are chasing ghosts and complicating a basic process for no real benefit.
You're leaving the house unlocked and money on the living room floor.
No I am not. Because the system is already compromised in your example. That means nothing matters. The data is already out.
-
Yeah I was thinking that changing the password on the user was a bad call as well.
instead, make the change, then send out a universal reboot command to all PCs with a 5 min timer giving people time to save things they are working on, and the rest, oh well. Then they will log in and be forced to change it.
-
@JaredBusch said in Active Directory Force All Users to Change Passwords on Next Login:
@DustinB3403 said in Active Directory Force All Users to Change Passwords on Next Login:
@JaredBusch said in Active Directory Force All Users to Change Passwords on Next Login:
@DustinB3403 you are chasing ghosts and complicating a basic process for no real benefit.
You're leaving the house unlocked and money on the living room floor.
No I am not. Because the system is already compromised in your example. That means nothing matters. The data is already out.
The system is already compromised, that is why the client is in this scorched earth issue. Read the thread. FFS
-
@DustinB3403 said in Active Directory Force All Users to Change Passwords on Next Login:
@JaredBusch said in Active Directory Force All Users to Change Passwords on Next Login:
@DustinB3403 said in Active Directory Force All Users to Change Passwords on Next Login:
@JaredBusch said in Active Directory Force All Users to Change Passwords on Next Login:
@DustinB3403 you are chasing ghosts and complicating a basic process for no real benefit.
You're leaving the house unlocked and money on the living room floor.
No I am not. Because the system is already compromised in your example. That means nothing matters. The data is already out.
The system is already compromised, that is why the client is in this scorched earth issue. Read the thread. FFS
I have, and that is why it does not matter. Because there is nothing to protect against. You are trying to protect against something that is already out.
So just perform the force change on login and move along.
-
@scottalanmiller said in Active Directory Force All Users to Change Passwords on Next Login:
@Grey said in Active Directory Force All Users to Change Passwords on Next Login:
Second, this command should only be used when you feel like a scorched earth method is best. It will piss off everyone in the enterprise.
That's where we are, yes.
-
@Texkonc said in Active Directory Force All Users to Change Passwords on Next Login:
@stacksofplates said in Active Directory Force All Users to Change Passwords on Next Login:
Could help you on Linux. Sorry.
What? You mean Linux doesnt work with AD?
Actually, it does. I join my Linux hosts to AD (we're a CentOS shop *NIX wise) and have an entry in the sudoers file so that anyone in the "IT" security group can elevate privileges using sudo. It works beautifully.
-
@anthonyh I believe that was sarcasm.
-
@DustinB3403 I figured, but just wanted to clear the air juuusstttt in case.
