Avatar billede lava Nybegynder
23. februar 2004 - 16:08 Der er 10 kommentarer og
1 løsning

Reset Password

Hej Eksperter
Jeg har 500 brugere i Active directory
Er der en eller anden smart måde jeg kan give alle et nyt password på en gang ?

De er alle i samme OU hvis det hjælper ?
Avatar billede serverservice Praktikant
23. februar 2004 - 16:18 #1
hvis du i din password policy-password age. indstiller den til 0 eller 1 dag bør det jo udløbe og bede brugeren om at skifte..bare et forslag
Avatar billede rigtigmmk Nybegynder
23. februar 2004 - 16:31 #2
det er der desværre ikke..
Avatar billede lava Nybegynder
23. februar 2004 - 16:36 #3
Er der så ikke en af jer der kan skrive et script der gør det ?
Evt et link til hvor i verden jeg kan finde sådan et ?
Avatar billede rigtigmmk Nybegynder
23. februar 2004 - 16:37 #4
du kan prøve med den kommando
NTDSUTIL skrive ? efter det for at ser muligheder
Avatar billede rigtigmmk Nybegynder
23. februar 2004 - 16:43 #5
jeg kender ikke til noget script, men jeg skal nok søger for dig
imens du kan kigge på den programme, måsker er den ikke lige det du søger men kan tillader bruger at  reset deres password
http://www.anixis.com/products/apr/default.htm
Avatar billede rigtigmmk Nybegynder
23. februar 2004 - 16:45 #6
den her er faktisk også udmærket

http://www.tools4ever.com/products/usermanagement/
Avatar billede rigtigmmk Nybegynder
23. februar 2004 - 16:48 #7
kigge på den her også
fra microsoft anbefaling :

Password reset disksIt is not unusual for users to forget their passwords
passwords
A security measure used to restrict logon names to user accounts and access to computer systems and resources. A password is a string of characters that must be provided before a logon name or an access is authorized. A password can be made up of letters, numbers, and symbols, and it is case sensitive.to local user accounts user accounts
In Active Directory, an object that consists of all the information that defines a domain user, which includes user name, password, and groups in which the user account has membership. User accounts can be stored in either Active Directory or on your local computer.
For computers running Windows XP Professional and member servers running Windows Server 2003, use Local Users and Groups to manage local user accounts. For domain controllers running Windows Server 2003, use Active Directory Users and Computers to manage domain user accounts.
from time to time, especially when they use strong passwords strong passwords
A password that provides an effective defense against unauthorized access to a resource. A strong password is at least six characters long, does not contain all or part of the users account name, and contains at least three of the four following categories of characters: uppercase characters, lowercase characters, base 10 digits, and symbols found on the keyboard (such as !, @, #).. Before the advent of password reset disks, the only way for administrators to restore a forgotten local user account password was to manually reset the user's password. In the process, the following information was lost:
E-mail that was encrypted with the user's public key
Internet passwords that were saved on the computer
Files that the user had encrypted

Password reset disks offer another solution to the problem of a forgotten password for a local user account. If users create password reset disks for their local accounts before they forget their passwords, they can reset the passwords without losing valuable data that was lost previously with administrative password resets.

When you create a password reset disk, a public key
public key
The nonsecret half of a cryptographic key pair that is used with a public key algorithm. Public keys are typically used when encrypting a session key, verifying a digital signature, or encrypting data that can be decrypted with the corresponding private key.and private key private key
The secret half of a cryptographic key pair that is used with a public key algorithm. Private keys are typically used to decrypt a symmetric session key, digitally sign data, or decrypt data that has been encrypted with the corresponding public key.pair are created. The private key is stored on a disk: the password reset disk. The public key encrypts the local user account password. If users forget their passwords, they can insert the password reset disk, which contains the private key, and decrypt the current password. The Forgotten Password Wizard prompts the user for a new password, which is then encrypted with the public key. Data is not lost because, basically, the user is simply changing a password. It is essential that password reset disks be stored in secured locations. For more information on how to create a password reset disk, see To create a password reset disk.

For more information about encryption, see Encryption. For more information about passwords, see Passwords


og her er link


http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windowsserver2003/proddocs/entserver/windows_password_resetdisk_overviewW.asp
Avatar billede squashguy Nybegynder
23. februar 2004 - 17:01 #8
tag et kig på dsquery og dsmod (kommandline-værktøjer)
Avatar billede squashguy Nybegynder
23. februar 2004 - 17:07 #9
hvis
  ou=brugere
  domæne = mitdomæne.dk

lister alle brugere:
  dsquery user ou=brugere,dc=domæne,dc=dk -limit 0

sætter alle passwords til 123456, og skal ændres ved næste login:
  dsquery user ou=brugere,dc=mitdomæne,dc=dk -limit 0 | dsmod user -pwd 123456 -mustchpwd yes
Avatar billede lava Nybegynder
24. februar 2004 - 10:38 #10
Det fik jeg ikke til at virke.
På en eller anden måde fik jeg slette alle brugerne.....

De er nu oprettet korrekt så jeg lukker
squashguy hvis du smider et svar får du point (selv om mine brugere forsvandt)

Lava
Avatar billede lava Nybegynder
14. december 2004 - 13:48 #11
lukker
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
IT-kurser om Microsoft 365, sikkerhed, personlig vækst, udvikling, digital markedsføring, grafisk design, SAP og forretningsanalyse.

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Du kan også logge ind via nedenstående tjenester