7 Replies Latest reply: Jan 4, 2014 1:05 PM by thamilton91
Morgs Level 1 Level 1 (10 points)

Hopefully a simple question.

 

Before I tick the box I just want to be sure that in the Global Password Policy settings that Diable means expire passwords on a certain date forcing users to have to create a new password on their next login?

 

Thanks

Morgs

  • 1. Re: Is disable the same as expire in the global password policy settings?
    FromOZ Level 2 Level 2 (405 points)

    Don't follow precisely what you are saying.

     

    Are you saying 'Disable login: [checkbox] on specifi date' and you want that to force users to create new password on their next login??

     

    If you want functionality to make users change password on their first login (i.e. you tell them their password is 'password' for first login) then choose 'Passwords must: [checkbox] be reset on first user login'.

     

    If you want passwords to be renewed then choose 'must be reset every [type in] months [select]'

     

    global_password.png

  • 2. Re: Is disable the same as expire in the global password policy settings?
    Morgs Level 1 Level 1 (10 points)

    Thank you FromOZ but I understand these options what I would like is the ability to force all users to reset their passwords on next login the same way that you can force users one at a time using the password reset options.

     

    Please see attached image.

     

    ThanksScreen Shot 2013-02-03 at 11.34.16 AM.png

  • 3. Re: Is disable the same as expire in the global password policy settings?
    FromOZ Level 2 Level 2 (405 points)

    Ahhh - that wasn't clear from the original post.

     

    Well as you can see the dialog box doesn't have that function. But... you could fudge it by choosing 'be reset every [number] [selection]' and making it 1 day.

  • 4. Re: Is disable the same as expire in the global password policy settings?
    Morgs Level 1 Level 1 (10 points)

    What I ended up doing was downloading Workgroup Manager and using the password reset option in there but I had to do it one user at a time.

     

    Thanks for trying to help me though.

  • 5. Re: Is disable the same as expire in the global password policy settings?
    thamilton91 Level 1 Level 1 (0 points)

    Hello I am trying to accomplish the same thing, but the majority of my Global Password Policy optinons are greyed out. Any ideas why?

     

    Thanks

    -Tyler

     

    Screen Shot 2013-12-28 at 11.14.23 PM.png

  • 6. Re: Is disable the same as expire in the global password policy settings?
    MrHoffman Level 6 Level 6 (12,455 points)

    You're using local services and apparently not Open Directory (unless you're bound to an Open Directory server elsewhere), so AFAIK many of those settings are simply not available.

     

    Your DNS server is also not enabled and running, which either means you have another source of DNS on your local networ, or you're trying to use ISP or public DNS, and trying to use external DNS won't work on a NAT'd network; the lack of local just usually cause problems.

     

    If you're trying to gain more control over managing users (beyond getting local DNS services and Open DIrectory going), then consider downloading and using Workgroup Manager; that provides far more control over and far more visibility into Open Directory.

  • 7. Re: Is disable the same as expire in the global password policy settings?
    thamilton91 Level 1 Level 1 (0 points)

    Thanks a lot! I have switched to open directory and now "be reset on first login" is turned on. I'm not having an issue where when the user signs in for the first time it prompts them to change the password, but when they put in the old password and new password, the prompt shakes and will not accept the data.

     

    Example: I created a John Doe account with the password: Server1 - when John Doe attempts to log in for the first time a prompt appears and asks for the Old Password, New Password and Verify New Password. Old Password is Server1, New Password is New123 confrim New123. Press enter and the prompt shakes and does not accept.

     

    Also noticed that users that have already logged in run into the same problem if the choose to simply "Change Password" before logging in.

     

    Any ideas?