Urgently force a domain-wide password change in AD

  1. Create new GPO
  2. Navigate to:
    • Computer Configuration” -> “Policies” -> “Windows Settings” -> “Security Settings” -> “Account Policies” -> “Password Policy.”
  3. Change the “Maximum password age” to 0, this will immediately expire all user passwords
  4. This method will log out all users who are currently logged.
Leave a Reply 0

Your email address will not be published. Required fields are marked *