When we originally created our company's domain, we had
password aging set to 60 days. We turned off the password
policy when we migrated to W2K. When we turned the policy
back on many users got locked out as it had been over 60
days since they last changed their password. If we were to
try this today then every user in the domain would
immediately be locked out or forced to change their
password as all users are over the 60 day password age.

How could I re-enable the Maximum Password Age Policy
without causing the above problems.

Thanks in Advance,

M

Just send out an email telling everyone to change his or
her password before you implement the policy or they will
be locked out. Or script that everyone has to change
password @ next logon.


>-----Original Message-----
>When we originally created our company's domain, we had
>password aging set to 60 days. We turned off the password
>policy when we migrated to W2K. When we turned the policy
>back on many users got locked out as it had been over 60
>days since they last changed their password. If we were
to
>try this today then every user in the domain would
>immediately be locked out or forced to change their
>password as all users are over the 60 day password age.
>
>How could I re-enable the Maximum Password Age Policy
>without causing the above problems.
>
>Thanks in Advance,
>
>M
>.
>

Hello,
You can contact Microsoft support and request a tool called
"multiuseredit.vbs" This tool will allow you to change the properties on
multiple objects in one session.

This posting is provided "AS IS" with no warranties, and confers no rights.