D8TA Posted February 15, 2006 Share Posted February 15, 2006 Is there a way to uncheck the password never expires checkbox under a user account? I have several field agents and when the image was created the check box was checked. Now I am trying to enforce some security and have the password expire but cannot get the check box unchecked. I tried using RegShot to see what registry keys were modified but that doesn't seem to work either because it was the security key which is unique to each user. Has anyone accomplished how to do this and could you shed some light on the matter for me. I will need to deploy this via CD to the users but don't know what else to try or do to remove the check box and start having the passwords expire.Thanks! Link to comment Share on other sites More sharing options...
nmX.Memnoch Posted February 15, 2006 Share Posted February 15, 2006 These are local machine accounts instead of domain accounts? If so, you could use a 3rd party utlity called NETUSER.EXE with the following command:NETUSER account_name /pwnexp:nYou can download NETUSER.EXE here. Link to comment Share on other sites More sharing options...
D8TA Posted February 15, 2006 Author Share Posted February 15, 2006 Thanks!I don't think this will work because the accounts are different for each notebook. Is there a way to poll the logged in user and run this exe file? I cannot rely on the user to run this file. Link to comment Share on other sites More sharing options...
nmX.Memnoch Posted February 16, 2006 Share Posted February 16, 2006 (edited) You're sending this to them on CD for them to apply security options, correct?All you need to do is run this as part of the process:NETUSER %USERNAME% /pwnexp:nAlso, if you want to setup some local "group policy" type settings you can run GPEDIT.MSC on one of your machines. Then grab the *.pol files from %SystemRoot%\system32\GroupPolicy\. Now just have your update process replace the ones on the local machine. After the files are overwritten include a command to run gpupdate /force to enforce the settings immediately. A lot of what you've probably already figured out how to do in the registry can be controlled by these settings...and the good thing about using the *.pol files is that even if they change the registry value the policy settings will change them right back.Oh...BTW, none of this will work unless they have local admin rights (something they really shouldn't have). Edited February 16, 2006 by nmX.Memnoch Link to comment Share on other sites More sharing options...
D8TA Posted February 16, 2006 Author Share Posted February 16, 2006 Thanks nmX.Memnoch! Link to comment Share on other sites More sharing options...
jaknell1011 Posted May 19, 2010 Share Posted May 19, 2010 I know I am resurrecting an old thread, but I cannot find netuser.exe anywhere on the web anymore, and it's exactly what I need. Can anyone link me to a working version or link or upload one for me? That would be awesome, thanks in advance! Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now