Hi all We are currently using Exchange 2007 one 64-bit Windows Server 2008 R2 Enterprise. We need statistics user can not change password default then us send email to notify them. Please help me

Hi, Kindly clarify you need that some user can't changed there password, that can be done through AD, "User can't changed his password", kindly confirm which type on email notification is need & for what condition??Ripu Daman Mina | MCSE 2003 & MCSA Messaging

Please explain little bit more on your question, its confuse. You need the number of users who can't change their password or what?Arun Kumar | MCSE:W2K3 + Messaging | MCTS:Exchange 2007 | MCTS:OCS 2007 R2 | ITIL-F V3

Hi all Sorry for the explanation of me. We are currently using Exchange 2007 one 64-bit Windows Server 2008 R2 Enterprise. My system consist : AD, mailbox,HUB,Edge When I create a new account with a default password 123. The account logon into email via owa not in the domain, they do not change the password 123. I need statistics the account do not change password 123 to send a message to them requesting password change

Hello, As per the article: http://msdn.microsoft.com/en-us/library/aa746510(VS.85).aspx To force a user to change their password at next logon, set the pwdLastSet attribute to zero (0). To remove this requirement, set the pwdLastSet attribute to -1. The pwdLastSet attribute cannot be set to any other value except by the system. You can run this query to get the users dumped in the csv file who have not changed their default password: ldifde -f Exportuser.csv -s <DomainControllerName> -t 3268 -d "DC=100Watts,DC=com" -p subtree -r "(&(objectCategory=person)(objectClass=User)(givenname=*))" -l "pwdLastSet" DC=100Watts,DC=com is the distinguihed name of my domain, you should replace this with yours. Once you have the csv file you can use excel to get the list of users who have not changed their default passwords, the attribute should be set to "0" for them. Hope this helps.

Hi, When I run this query . ldifde -f Exportuser.csv -s dc.abc.com -t 3268 -d "DC=abc,DC=com" -p subtree -r "(&(objectCategory=person)(objectClass=User)(givenname=*))" -l "pwdLastSet" The result : CN=a1,Ou=test,DC=abc;DC=com changetype=add pwdlastset=129252808792499362 CN=a2,Ou=test,DC=abc;DC=com changetype=add pwdlastset=129252856792499801 Thus I do not know users have not change the default password 123

Users who have not changed their default password will have the "pwdlastset" value set to "0".

Hi I created 2 new account a1,a2 with default password 123. After I run this query The result : CN=a1,Ou=test,DC=abc;DC=com changetype=add pwdlastset=129252808792499362 CN=a2,Ou=test,DC=abc;DC=com changetype=add pwdlastset=129252856792499801 Users who have not changed or changed their default password will have the "pwdlastset" value set # '0'. Thus, I do not statistics user not change default password

Did you select "User must change password at next logon" while creating these test accounts?

Hi We are currently using Exchange 2007 one 64-bit Windows Server 2008 R2 Enterprise. My system consist AD,mailbox,huB,edge. When We t check box " user must change password at next logon". Then, these test account can not logon email by OWA. It not join domain abc.com

Hi, I you have checked user must change password on next logon, then user must login in a domain, when user dose that it will ask to change the password. It can't be changed through OWARipu Daman Mina | MCSE 2003 & MCSA Messaging

Exchange 2007 SP3 has a new feature that allows a password to be changed through OWA. It needs to be enabled. If you are using Exchange 2007 on Windows 2008 R2 then you must be using SP3, as it is the only version supported on that OS. http://technet.microsoft.com/en-us/library/ff607232(EXCHG.80).aspx Simon. Simon Butler, Exchange MVP. http://blog.sembee.co.uk , http://exbpa.com/

Hi Currently my system users not join domain. They only use checking mail via owa by internet. When I create new accounts with default passwords 123. They log on to that email with default password 123. After they still use this passwords. They do not change the default password 123. Because I want to secure so I need statistics the account do not change password 123 to send a message to them requesting password change <object id="tts_flash" width="18" height="18" type="application/x-shockwave-flash" data="http://www.gstatic.com/translate/sound_player2.swf" id="tts_flash" height="18" width="18"> <param name="movie" value="http://www.gstatic.com/translate/sound_player2.swf" /> <param name="flashvars" value="sound_name=&sound_name_cb=_TTSSoundFile" /> <param name="wmode" value="transparent" /> <param name="allowScriptAccess" value="always" /> </object>

Hi orchid, Let's simple your query. You need to select the "user must change password at next logon", and password should meet the complexity. So the link Sembee gave you will solve your problem. http://technet.microsoft.com/en-us/library/ff607232(EXCHG.80).aspx It doesn't matter whether the user is join domain or not. Please run the "IISREST /noforce" after you change the registry.Frank Wang

Hi Frank, I can only check " user must change password at next logon" for new account . But now the account number of my system a lot of 10,000 users who have created If I check "user must change password at next logon" will affect the old user password had changed Is There solution for me ?

Hi orchid, Do you mean there is a lot of user who still use simple password and you want to notify them to change a complexity password? If yes, I think it is easier to use Group Policy to limit the password configuration. eg: password age, password complexity. You can set the maximum password age to 5 day, after all users change their password to meet the password policy, you can relax the limitation. Frank Wang

Hi Frank, Current users of the system using a default password "123".T his is the password that I created for them. They do not change it , They still using default password "123". Addition my users do not join in domain. T hey can check emails via OWA by internet. So I can not use Group Policy to limit the password configuration for them because it does not work when users are not in the domain. Can I statistics old account still using default password "123" ?

Hi orchid, As I know, you can use Group Policy to configurate user's password policy no matter how the user's client is joined to domain or not. (I also tested it in my lab) You should change the Password Policy in default Domain Policy. But you cannot create new user with simple default password 123 anymore.Frank Wang

Hi Farnk, Please help me answer , Before the password expires, Is it warning to users ? . I'm afraid it does not alert. Users will not know to change their password

Hi orchid, It will warn to users after user log on to OWA. "Your password will expire today.Would you like to change it now?"Frank Wang

Hi Frank, in case the users does not change during the 5 day password . They will not login to mail. After 5 day, they wanted to use email. How does the solution ?

in case the users does not change during the 5 day password . They will not login to mail. After 5 day, they wanted to use email. How does the solution ? Hi orchid, Actually, if they didn't change the password in age limitation, a change password web page will appear after they log on to OWA next time.Frank Wang

Hi orchid, Any updates on your issue?Frank Wang

Hi Farnk, In our enviromment We have the Exchange 2007 SP1, with a traditional cluster (02 nodes, active, passive > Mailbox rule) + 01 NLB cluster (02 nodes > HUB and CAS) and 01 Edge server. I'm planning to upgrade to SP3 following the order: - CAS and HUB servers; - Edge server - Mailbox servers (first in the passive node and after on the active nodes). My doubt if it's necessary to update de schema and domain? If is what is the correct procedure? I'm worry because We have more than 13000 accounts. Thank you

Hi orchid, I would suggest you open a new case about the upgrade. Thus other forum members can search similar question easily. Right?Frank Wang

Hi Frank, Now I statistics user not change default password. I want require these user must change passoword without affecting user other. Please help me