{"id":65843,"date":"2006-12-14T16:03:00","date_gmt":"2006-12-14T16:03:00","guid":{"rendered":"https:\/\/blogs.technet.microsoft.com\/heyscriptingguy\/2006\/12\/14\/how-can-i-set-a-users-password-and-then-require-them-to-change-that-password-the-next-time-they-log-on\/"},"modified":"2006-12-14T16:03:00","modified_gmt":"2006-12-14T16:03:00","slug":"how-can-i-set-a-users-password-and-then-require-them-to-change-that-password-the-next-time-they-log-on","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/scripting\/how-can-i-set-a-users-password-and-then-require-them-to-change-that-password-the-next-time-they-log-on\/","title":{"rendered":"How Can I Set a User’s Password and Then Require Them to Change That Password the Next Time They Log on?"},"content":{"rendered":"

\"Hey,<\/p>\n

Hey, Scripting Guy! In our school, how can I enable teachers to change a student\u2019s password to their logon name, then force those students to change their password the next time they log on?<\/p>\n

— DS<\/p>\n

\"Spacer\"\"Hey,\"Script<\/a><\/p>\n

Hey, DS. Boy, did you pick the wrong person to ask. After all, the Scripting Guy who writes this column used to be a teacher; if he knew how to force students to do things he\u2019d probably still be teacher!<\/p>\n

Actually, the Scripting Guy who writes this column always got along really well with his students; in fact, he\u2019s always gotten along really well with kids, period. As his fellow Scripting Guys will attest, it\u2019s only adults<\/i> he has problems with. Perhaps that\u2019s because, as the Scripting Son pointed out a few weeks ago, \u201cYou know, any place you go you\u2019re usually the most immature person there.\u201d And no, we have no idea<\/i> what could have provoked this outburst.<\/p>\n

Well, OK, maybe we have some<\/i> idea \u2026.<\/p>\n

But regardless of whether you\u2019re dealing with a grownup, a child, or even a Scripting Guy, here\u2019s a script that will set a user\u2019s password to their logon name, then require that user to change that password the next time they logon:<\/p>\n

Set objUser = GetObject(\"LDAP:\/\/cn=Ken Myer,ou=Finance,dc=fabrikam,dc=com\")\nobjUser.SetPassword objUser.sAMAccountName\nobjUser.Put \"pwdLastSet\", 0\nobjUser.SetInfo\n<\/pre>\n
And yes, it is<\/i> a very short and concise script, isn\u2019t it? Yet another reason why the Scripting Guy who writes this column is no longer a teacher: teachers have to work hard. As for Scripting Guys, well \u2026.<\/p>\n
As you can see, we start out by binding to the user account in Active Directory; that\u2019s what this line of code does:<\/p>\n
Set objUser = GetObject(\"LDAP:\/\/cn=Ken Myer,ou=Finance,dc=fabrikam,dc=com\")\n<\/pre>\n
We then call the SetPassword<\/b> method in order to change the user\u2019s password. With SetPassword we have to supply one parameter: the new password for the user. Because we want the new password to be the user\u2019s logon name we pass the value of the sAMAccountName<\/b> attribute: <\/p>\n
objUser.SetPassword objUser.sAMAccountName\n<\/pre>\n
Believe it or not, that\u2019s all we have to do to set the user\u2019s password.<\/p>\n
Requiring the user to change that password the next time they log on is twice as hard; after all, that requires two whole lines of code:<\/p>\n
objUser.Put \"pwdLastSet\", 0\nobjUser.SetInfo\n<\/pre>\n
In the first line we assign the value 0 to the pwdLastSet<\/b> attribute. This attribute keeps track of the last time a user changed his or her password. If the value is set to 0 then the user has to change their password the next time they log on.<\/p>\n
In line 2 we then call the SetInfo<\/b> method to write the updated attribute value back to Active Directory. <\/p>\n
That should do the trick, DS, provided, of course, that teachers have the right to change user passwords and to update the pwdLastSet attribute.<\/p>\n
Speaking of teachers, the Scripting Guy who writes this column actually enjoyed teaching; that\u2019s one reason he spends so much of his time coaching. What he didn\u2019t<\/i> like were school districts: huge, impersonal bureaucracies that never know what they\u2019re doing, or why. And so he ended up at Microsoft instead.<\/p>\n
And yes, we know what you\u2019re thinking. But if anyone asks, you said it, not us.<\/p>\n

<\/p>\n
\n\n\n\n
\"Top<\/a>Top of page<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n","protected":false},"excerpt":{"rendered":"
Hey, Scripting Guy! In our school, how can I enable teachers to change a student\u2019s password to their logon name, then force those students to change their password the next time they log on? — DS Hey, DS. Boy, did you pick the wrong person to ask. After all, the Scripting Guy who writes this […]<\/p>\n","protected":false},"author":595,"featured_media":87096,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[421,3,63,5],"class_list":["post-65843","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scripting","tag-passwords","tag-scripting-guy","tag-security","tag-vbscript"],"acf":[],"blog_post_summary":"
Hey, Scripting Guy! In our school, how can I enable teachers to change a student\u2019s password to their logon name, then force those students to change their password the next time they log on? — DS Hey, DS. Boy, did you pick the wrong person to ask. After all, the Scripting Guy who writes this […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/65843","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/users\/595"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/comments?post=65843"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/65843\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media\/87096"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media?parent=65843"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/categories?post=65843"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/tags?post=65843"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}