Windows 2000 Administration in a Nutshell

Name

password

Synopsis

Manage password options for a user account.

Procedures

Use the following procedures to change, reset, or modify passwords.

Change Your Own Password

Ctrl-Alt-Del → Change Password

You must know your old password before you can specify a new one.

Reset Password for a User Account

Active Directory Users and Computers → select account → Action → Reset Password

Specify the new password, then select “User must change password at next logon” if you want users to manage their own passwords. You may have to reset a user’s password if:

• The user has forgotten it.

• The password has expired before the user has had a chance to change it.

Modify Password Options

Active Directory Users and Computers → select account → Action → Properties → Account

The various options are shown in Table 4.11.

Table 4-11. Password Options for a Domain User Account

Password Option	Usage Tips
User must change password at next logon	Gives users control of their own passwords
User cannot change password	Gives administrators control of user passwords
Password never expires	Clear for temporary employees
Save password as encrypted clear text	Enable this to use Digest authentication for IIS
Account is disabled	Keep new accounts disabled until their users arrive at the company
Smart card required for interactive logon	Stores encryption keys and passwords on a smart card
Account is trusted for delegation	Lets the user delegate authority over part of Active Directory namespace to other users
Account ...