Changing Active Directory password when connecting to server?

Question

Level 1

5 points

Changing Active Directory password when connecting to server?

Hi all,

I work at a University, and in our department we have a Windows server that also has a domain set up and active directory. We have been working on transitioning another department over to our servers, so we have been adding them to our active directory. When we add them, we give them a temporary password and then check "Require user to change password at next logon." So here is the kicker: all of the users are using local accounts on their Macs, and then connecting to our server under their local account, so they have no way of accessing the active directory from their user account. So, when they connect to the server, they get the message "You must change your password in order to access the server." The only way around this is to have them log in to a Windows machine that is on the network and change their password there. Is there any way around this? I have seen ways to do it using Terminal, but these people are not very tech-savvy, and I am going to have to send out instructions regardless, so the simpler the better.

Thanks!

Posted on Mar 11, 2014 12:58 PM

Reply

Answer 1

Mar 11, 2014 8:37 PM in response to stimm32

Do your users use Exchange? If so, they can log into OWA and change the password from there.

Do you have a Mac server kicking around? If so, you can bind it to the domain, set up an AFP share that the users can access, and then they can change password from the connect to server dialog as shown below:

Note that AFP provides a Change Password... button. Clicking it...

Allows you to change a password. This server in bound to AD and the jadams users is an AD account.

R-

Apple Consultants Network

Apple Professional Services

Author "Mavericks Server – Foundation Services" :: Exclusively available in Apple's iBooks Store

Reply

Answer 2

Morgs

Level 1

12 points

Oct 30, 2014 5:57 PM in response to Strontium90

Has anyone been successful with this. In my testing I cannot get it to work.

I wonder though if you probably have to successfully mount the share first and then try making the password change on the next pass. I will try that.

Thanks

Morgs

Reply

Answer 3

Oct 31, 2014 3:31 AM in response to stimm32

The more typical approach is for users to use Active Directory logins to login to the Mac and to the various servers. You can still get all the benefits of having 'local' accounts by letting it create a portable home directory when you login on the Mac. This creates a 'local' account linked to the Active Directory account but with the home directory stored on the local Mac. Then you can use System Preferences -> Users & Groups and Change Password to change the password for the user both for local logins and have it automatically synced back to Active Directory.

Reply