user account properties


is there way control / disable these settings based on a group?


yes can. method should similar mahdi shared. can develop powershell script , schedule using task scheduler running periodically.

set-aduser is cmdlet use where:

  • cannotchangepassword switch use make user unable change password
  • changepasswordatlogon switch use force user change password @ next logon
  • passwordneverexpires switch use make password never expires

more details here: https://technet.microsoft.com/en-us/library/ee617215.aspx


this posting provided no warranties or guarantees , , confers no rights.

ahmed malek

my website link

my linkedin profile

my mvp profile



Windows Server  >  Directory Services



Comments

Popular posts from this blog

Error: 0x80073701 when trying to add Print Services Role in Windows 2012 Standard

Disconnecting from a Windows Server 2012 R2 file sharing session on a Windows 7,8,10 machine

Event ID 64,77,1008 Certificates Events Windows Server 2008, 2008R2