Windows 7 / Security and Privacy

---

Resetting a User's Domain Password

One of the good things about using domain policy to require users to change their passwords is that the overall security of the network is improved by doing so. One of the downsides of frequent password changes is that users occasionally forget their password. If this happens, it is easy to fix by doing the following:

1. Find the user account whose password you want to reset in Active Directory Users And Computers.
2. Right-click the user account and then select Reset Password.
3. In the Reset Password dialog box shown, type and then confirm the new password for the user.
4. If you want, select the User Must Change Password At Next Logon check box.
5. If the account status is listed as locked, select the Unlock The User's Account check box.
6. Click OK.

Unlocking User Accounts

Whenever users violate group policy, such as when they fail to change their passwords before they expire or exceed the limit for bad logon attempts, Active Directory locks their accounts. After an account is locked, the user can no longer log on. As accounts can also be locked because someone is trying to break into an account, you shouldn't automatically unlock accounts. Instead, either wait until the user asks you to unlock his or her account or go speak to the user when you notice his or her account has been locked.

You can unlock accounts by completing the following steps:

1. In Active Directory Users And Computers, right-click the locked account and then select Properties.
2. In the Properties dialog box, select the Account tab.
3. Select the Unlock Account check box and then click OK.