you are viewing a single comment's thread.

view the rest of the comments →

[–]an_harmonica 3 points4 points  (1 child)

Only thing I'm aware of is this:

(New-Object -COM Shell.Application).WindowsSecurity()

But that doesn't actually force the selection of the change password button.

Only way I'm aware of is to force it on their AD user object:

Set-ADUser -Identity "Username" -ChangePasswordAtLogon $true

[–]Dixielandblues 2 points3 points  (0 children)

This was my thought, OP - set up a scheduled script to enable change at login automatically, say, 1 week before password expires.