Home / server / Questions / 557856
Accepted
Max Allan
Asked: 2013-11-28 09:47:26 +0800 CST

How to set AD password to expired / to be changed with PowerShell

  • 772

I need to reset a whole load of user passwords and then set them as expired or "User must change password on next login" The password is easy to change with SetADAccountPassword.

Looking at the SetADAccountControl cmdlet instructions suggests there is a "PasswordExpired" parameter in the description, but there is no mention of that parameter in the rest of the text. If I try it, it doesn't exist.

Ideally I'm hoping for a fairly simple, Powershell command to do it! I don't have any other scripting language on the server.

Thanks.

active-directory

2 Answers

  1. Best Answer
    Get-ADUser -Identity $name | Set-ADUser -ChangePasswordAtLogon:$true

    Should do the trick.

    • 10

  2. Office365 / ExchangeOnline / Exchange 2016 on Premises: 

    Connect-MsolService
$email = [email protected]
Set-MsolUser -UserPrincipalName $email |Set-MsolUserPassword -ForceChangePasswordOnly $true -ForceChangePassword $true
    • 1