------------------
Jason W. Jones

Much easier and no extra work, one policy works on all!!

I would like to notify our users when their password is going to expire (using Kix)...got that. I need to do it this way because we have several people on the road and they are using a secureID system. They don't get notified by NT when their password expires. So...all that being said. I need to find a way to let the user change their password, from the login script. In fact, force them to.

any ideas?

------------------
DrJones

I thought that I have found a way to do this but, i can't seem to find a way to change the password from a command line on a NT computer

win9x users have the "net password" option, but i can't find anything for NT users.

Bryce

I've been trying to find the same thing. I even toyed with idea of passing "CTL-ALT, DEL" keys, but that will not work. You can't get Kix to hold down two keys at the same time and send and additional key.

Thanks again.

------------------
DrJones

They say
Certain special keys can be sent and should be enclosed in braces:

N.B. Windows does not allow the simulation of the "CTRL-ALT-DEL" combination!
I can see some difficulty in this it would begin a shut down of the script, checking.

It's a tough one. I've been using KixTart for 3 years and I'm stumped.

------------------
DrJones

that i couldn't get to work

Still looking.....

Bryce

switch (status) {
case NERR_Success:
// nothing to do
break;
case ERROR_ACCESS_DENIED:
printf("Error: The user does not have access to the requested information.\n");
break;
case NERR_InvalidComputer:
printf("Error: The computer name is invalid.\n");
break;
case NERR_NotPrimary:
printf("Error: The operation is allowed only on the primary domain controller of the domain.\n");
break;
case NERR_UserNotFound:
printf("Error: The user name could not be found.\n");
break;
case NERR_PasswordTooShort:
printf("Error: The password is shorter than required.\n");
break;
case ERROR_INVALID_PASSWORD:
printf("Error: The specified network password is not correct.\n");
break;
case ERROR_INVALID_PASSWORDNAME:
printf("Error: The format of the specified password is invalid.\n");
break;
case ERROR_NULL_LM_PASSWORD:
printf("Error: The NT password is too complex to be converted to a LAN Manager password.\n");
break;
case ERROR_WRONG_PASSWORD:
printf("Error: Unable to update the password. The value provided as the current password is incorrect.\n");
break;
case ERROR_ILL_FORMED_PASSWORD:
printf("Error: Unable to update the password. The value provided for the new password contains values that are not allowed in passwords.\n");
break;
case ERROR_PASSWORD_RESTRICTION:
printf("Error: Unable to update the password because a password update rule has been violated.\n");
break;
case ERROR_LOGON_FAILURE:
printf("Error: Logon failure: unknown user name or bad password.\n");
break;
case ERROR_PASSWORD_EXPIRED:
printf("Error: Logon failure: the specified account password has expired.\n");
break;
case ERROR_NT_CROSS_ENCRYPTION_REQUIRED:
printf("Error: A cross-encrypted password is necessary to change a user password.\n");
break;
case ERROR_LM_CROSS_ENCRYPTION_REQUIRED:
printf("Error: A cross-encrypted password is necessary to change this user password.\n");
break;
case ERROR_NO_SUCH_DOMAIN:
printf("Error: The specified domain did not exist.\n");

Nice find though, time to play!!

You can use:

Net User %username% /DOMAIN > %TEMP%\UserInfo.txt

on NT workstations to get info about nearly all net-info for the current user. Among other things all settings for password.

Let your script read UserInfo.txt and make what actions you want.

Erik

[This message has been edited by kholm (edited 28 December 2000).]

the error that passwd.exe give me is

Error: Undocumented error code 1327.

but that helps
Bryce

PS, also trying to have a user change the password using an admin type program like "net user" you get no access error messages, i am guessing admins only can use those programs.

Net User "@USERID" "$NewPW" /DOMAIN

Erik

I tried that also, it was the first thing that i tried. In order to use that command the user would need admin rights.

I find it hard to belive that there is no command line util that a user could use to change their domain password....

Bryce

anyone who knows c++ care to take a look at this?
http://support.microsoft.com/support/kb/articles/Q165/3/84.ASP

Bryce

[This message has been edited by Bryce (edited 28 December 2000).]

Run 'CPW domainname username oldpassword newpassword'

Erik

I am still looking but every where i go, i keep finding "Press CTRL-ALT-DEL...."

Bryce

Bryce

run, %comspec%
send, net use l: /del
send, {enter}
send, net use l: \\\\SERVERNAME\\d$ /USER:MINDFX\\FAKEACCOUNT *
send, {enter}

send, Thopshopper{!}
send, {enter}
send, NET USER doggiedue * /DOMAIN
send, {enter}

sleep, 10000
send, net use l: /del
send, {enter}

This works, via VPN, have tried with user who is not admin, the script is a EXE.
this is not done, but just started and playing with it.

Figure use Kix to generate the window and with hidden consoles run the autoit, can use variables to input password for sending the completed.
NET USER doggiedue password /domain

make sense or am I wasting my time?

Happy New Year!!!!

Thanks again.

------------------
DrJones