Disable via GPO the option in AD for password reset "The user must logoff and then logon again for the change to take effect"
i have reset password user leave company. returned pc , able unlock pc old password. when checked in ad under option user must change password @ next logon, saw said "the user must logoff , logon again change take effect"
i'm running windows server enterprise 2008
is there way remove option via group policy on password change user logoff , logon again take effect?
alternatively, there better way out there reset users password or logon details remotely within 1-2 minute window stop them coming desk log in again?
you can require password verification on unlocking - honest, disabling user account better idea instead of changing password.
anyway, disabling account requires following setting (translated german out of mind, might not 100% exact):
computer configuration - policies - windows-settings - security settings - local policies - security options: interactive logon - require domain controller authentication unlock workstation
martin
no not evil, if know doing: or bad gpos?
, if bothers me - coke bottle design refreshment :))
restore forum design - user defined cascading style sheet!
Windows Server > Group Policy
Comments
Post a Comment